<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2026:39332</id>
    <title>None: kernel bug fix and enhancement update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-25 00:20:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>kernel bug fix and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Bug Fix(es) and Enhancement(s):  

  * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHBA-2026:39332" id="RHBA-2026:39332" type="rhsa" title="RHBA-2026:39332"/>
      <reference href="https://errata.almalinux.org/9/ALBA-2026-39332.html" id="ALBA-2026:39332" type="self" title="ALBA-2026:39332"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.26.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.26.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.26.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">c8ab1a1b744d203ebd5178d3d20b8d3529d37c462f00c9cad93314195f7dfd28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:4940</id>
    <title>Important: xz security update</title>
    <issued date="2022-06-08 00:00:00"/>
    <updated date="2023-03-07 17:17:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xz security update</summary>
    <description>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:4940" id="RHSA-2022:4940" type="rhsa" title="RHSA-2022:4940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1271" id="CVE-2022-1271" type="cve" title="CVE-2022-1271"/>
      <reference href="https://bugzilla.redhat.com/2073310" id="2073310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-4940.html" id="ALSA-2022:4940" type="self" title="ALSA-2022:4940"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="xz-libs" version="5.2.5" release="8.el9_0" epoch="0" arch="i686" src="xz-5.2.5-8.el9_0.src.rpm">
          <filename>xz-libs-5.2.5-8.el9_0.i686.rpm</filename>
          <sum type="sha256">316697e0c37f058a385ab75b0d643fb6a458d37c35231b489cbb9940143b82b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5099</id>
    <title>Important: grub2, mokutil, shim, and shim-unsigned-x64 security update</title>
    <issued date="2022-06-16 00:00:00"/>
    <updated date="2022-08-23 18:24:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grub2, mokutil, shim, and shim-unsigned-x64 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.
The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.
Security Fix(es):
* grub2: Integer underflow in grub_net_recv_ip4_packets (CVE-2022-28733)
* grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap (CVE-2021-3695)
* grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling (CVE-2021-3696)
* grub2: Crafted JPEG image can lead to buffer underflow write in the heap (CVE-2021-3697)
* grub2: Out-of-bound write when handling split HTTP headers (CVE-2022-28734)
* grub2: shim_lock verifier allows non-kernel files to be loaded (CVE-2022-28735)
* grub2: use-after-free in grub_cmd_chainloader() (CVE-2022-28736)
* shim: Buffer overflow when loading crafted EFI images (CVE-2022-28737)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5099" id="RHSA-2022:5099" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3695" id="CVE-2021-3695" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3696" id="CVE-2021-3696" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3697" id="CVE-2021-3697" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28733" id="CVE-2022-28733" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28734" id="CVE-2022-28734" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28735" id="CVE-2022-28735" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28736" id="CVE-2022-28736" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28737" id="CVE-2022-28737" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/1991685" id="1991685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1991686" id="1991686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1991687" id="1991687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2083339" id="2083339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090463" id="2090463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090857" id="2090857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090899" id="2090899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092613" id="2092613" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5099.html" id="ALSA-2022:5099" type="self" title="ALSA-2022:5099"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="grub2-efi-x64-modules" version="2.06" release="27.el9_0.7.alma" epoch="1" arch="noarch" src="grub2-2.06-27.el9_0.7.alma.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-27.el9_0.7.alma.noarch.rpm</filename>
          <sum type="sha256">7c1a39435cb145b6331f3d84a54a2b8bb29606f0240fcdd51c7ef7e400db63d5</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.06" release="27.el9_0.7.alma" epoch="1" arch="noarch" src="grub2-2.06-27.el9_0.7.alma.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-27.el9_0.7.alma.noarch.rpm</filename>
          <sum type="sha256">8741776e12b0fd0ce6b1682017da1f8873880b51e05189756550de434d50a722</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="27.el9_0.7.alma" epoch="1" arch="noarch" src="grub2-2.06-27.el9_0.7.alma.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-27.el9_0.7.alma.noarch.rpm</filename>
          <sum type="sha256">ac01bf19abdade8860177a8e290b70d806375c8a2d9ed3ff47b54d1256005f16</sum>
        </package>
        <package name="grub2-pc-modules" version="2.06" release="27.el9_0.7.alma" epoch="1" arch="noarch" src="grub2-2.06-27.el9_0.7.alma.src.rpm">
          <filename>grub2-pc-modules-2.06-27.el9_0.7.alma.noarch.rpm</filename>
          <sum type="sha256">e2370f5a48d28813f385af92662f53c7c47d593d5c735809aaa6b7d8bc329c07</sum>
        </package>
        <package name="grub2-common" version="2.06" release="27.el9_0.7.alma" epoch="1" arch="noarch" src="grub2-2.06-27.el9_0.7.alma.src.rpm">
          <filename>grub2-common-2.06-27.el9_0.7.alma.noarch.rpm</filename>
          <sum type="sha256">ec2931fabadf7f9962946fbe110f6ac90a76e684339698e6685369054ebb6cb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5242</id>
    <title>Moderate: vim security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:37:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for vim-filesystem is now available for AlmaLinux 9.</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554)
* vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943)
* vim: Out-of-range Pointer Offset (CVE-2022-1420)
* vim: heap buffer overflow (CVE-2022-1621)
* vim: buffer over-read (CVE-2022-1629)
* vim: use after free in utf_ptr2char (CVE-2022-1154)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5242" id="RHSA-2022:5242" type="rhsa" title="RHSA-2022:5242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0554" id="CVE-2022-0554" type="cve" title="CVE-2022-0554"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0943" id="CVE-2022-0943" type="cve" title="CVE-2022-0943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1154" id="CVE-2022-1154" type="cve" title="CVE-2022-1154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1420" id="CVE-2022-1420" type="cve" title="CVE-2022-1420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1621" id="CVE-2022-1621" type="cve" title="CVE-2022-1621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1629" id="CVE-2022-1629" type="cve" title="CVE-2022-1629"/>
      <reference href="https://bugzilla.redhat.com/2058483" id="2058483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064064" id="2064064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073013" id="2073013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077734" id="2077734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2083924" id="2083924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2083931" id="2083931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5242.html" id="ALSA-2022:5242" type="self" title="ALSA-2022:5242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="16.el9_0.2" epoch="2" arch="noarch" src="vim-8.2.2637-16.el9_0.2.src.rpm">
          <filename>vim-filesystem-8.2.2637-16.el9_0.2.noarch.rpm</filename>
          <sum type="sha256">c913d7a2e965f86e79605147e53d90808d00155ca9c626a98ae01fd32cced94b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5244</id>
    <title>Moderate: expat security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:34:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for expat is now available for AlmaLinux 9.</summary>
    <description>Expat is a C library for parsing XML documents.
Security Fix(es):
* expat: stack exhaustion in doctype parsing (CVE-2022-25313)
* expat: integer overflow in copyString() (CVE-2022-25314)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5244" id="RHSA-2022:5244" type="rhsa" title="RHSA-2022:5244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25313" id="CVE-2022-25313" type="cve" title="CVE-2022-25313"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25314" id="CVE-2022-25314" type="cve" title="CVE-2022-25314"/>
      <reference href="https://bugzilla.redhat.com/2056350" id="2056350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2056354" id="2056354" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5244.html" id="ALSA-2022:5244" type="self" title="ALSA-2022:5244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="expat-devel" version="2.2.10" release="12.el9_0.2" epoch="0" arch="i686" src="expat-2.2.10-12.el9_0.2.src.rpm">
          <filename>expat-devel-2.2.10-12.el9_0.2.i686.rpm</filename>
          <sum type="sha256">c07cdd3796d62662a2b077cf05786bf59fc79599b53b3c7f44cebdded5f4af93</sum>
        </package>
        <package name="expat" version="2.2.10" release="12.el9_0.2" epoch="0" arch="i686" src="expat-2.2.10-12.el9_0.2.src.rpm">
          <filename>expat-2.2.10-12.el9_0.2.i686.rpm</filename>
          <sum type="sha256">d55c59b0c26f06481a7dae0ab87203cadfca0af6ec3c44126d83285898172b2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5249</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-abi-stablelists is now available for AlmaLinux 9.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966)
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643)
* SR-IOV performance &gt; 50% degradation (BZ#2074830)
* fix data corruption caused by dm-integrity (BZ#2082187)
* SCTP client-side peeloff issues [almalinux-9] (BZ#2084044)
* TCP connection fails in a asymmetric routing situation (BZ#2085480)
* Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963)
* spec: Fix separate tools build (BZ#2090852)
* call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255)
* Mark ThunderX NIC driver as unmaintained (BZ#2092638)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5249" id="RHSA-2022:5249" type="rhsa" title="RHSA-2022:5249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1012" id="CVE-2022-1012" type="cve" title="CVE-2022-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1729" id="CVE-2022-1729" type="cve" title="CVE-2022-1729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1966" id="CVE-2022-1966" type="cve" title="CVE-2022-1966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27666" id="CVE-2022-27666" type="cve" title="CVE-2022-27666"/>
      <reference href="https://bugzilla.redhat.com/2061633" id="2061633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064604" id="2064604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2086753" id="2086753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092427" id="2092427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5249.html" id="ALSA-2022:5249" type="self" title="ALSA-2022:5249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5252</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:29:20"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libarchive is now available for AlmaLinux 9.</summary>
    <description>The libarchive programming library can create and read several different
streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images.
Libarchive is used notably in the bsdtar utility, scripting language bindings
such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
(CVE-2022-26280)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5252" id="RHSA-2022:5252" type="rhsa" title="RHSA-2022:5252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26280" id="CVE-2022-26280" type="cve" title="CVE-2022-26280"/>
      <reference href="https://bugzilla.redhat.com/2071931" id="2071931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5252.html" id="ALSA-2022:5252" type="self" title="ALSA-2022:5252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="libarchive" version="3.5.3" release="2.el9_0" epoch="0" arch="i686" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-3.5.3-2.el9_0.i686.rpm</filename>
          <sum type="sha256">0e092bde47271bc548721c5f6ee2ac7626ba4c29c460d7281b29b32e4c8b4797</sum>
        </package>
        <package name="libarchive-devel" version="3.5.3" release="2.el9_0" epoch="0" arch="i686" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-devel-3.5.3-2.el9_0.i686.rpm</filename>
          <sum type="sha256">33d1567208bd84d8697507947591691b0ab6ae6761160c181847d1c67e5ea845</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5942</id>
    <title>Moderate: vim security update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 17:16:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Out-of-bounds Write (CVE-2022-1785)
* vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)
* vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5942" id="RHSA-2022:5942" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1785" id="CVE-2022-1785" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1897" id="CVE-2022-1897" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1927" id="CVE-2022-1927" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2088689" id="2088689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2091682" id="2091682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2091687" id="2091687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5942.html" id="ALSA-2022:5942" type="self" title="ALSA-2022:5942"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="16.el9_0.3" epoch="2" arch="noarch" src="vim-8.2.2637-16.el9_0.3.src.rpm">
          <filename>vim-filesystem-8.2.2637-16.el9_0.3.noarch.rpm</filename>
          <sum type="sha256">85377e40c2d0d6abc50777ec8eb90ec6a20cc2cc106fcb471585ad16ed4f920f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6003</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 21:12:55"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248)
* Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253)
* FIPS module identification via name and version (BZ#2093384)
* gfs2: File corruption with large writes when memory is tight (BZ#2097306)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251)
* AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740)
* Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903)
* Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854)
* Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858)
* lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085)
* OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974)
Enhancement(s):
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6003" id="RHSA-2022:6003" type="rhsa" title="RHSA-2022:6003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0494" id="CVE-2022-0494" type="cve" title="CVE-2022-0494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://bugzilla.redhat.com/2039448" id="2039448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6003.html" id="ALSA-2022:6003" type="self" title="ALSA-2022:6003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="kernel-doc" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6157</id>
    <title>Moderate: curl security update</title>
    <issued date="2022-08-24 00:00:00"/>
    <updated date="2022-08-30 18:16:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
* curl: HTTP compression denial of service (CVE-2022-32206)
* curl: Unpreserved file permissions (CVE-2022-32207)
* curl: FTP-KRB bad message verification (CVE-2022-32208)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6157" id="RHSA-2022:6157" type="rhsa" title="RHSA-2022:6157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32206" id="CVE-2022-32206" type="cve" title="CVE-2022-32206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32207" id="CVE-2022-32207" type="cve" title="CVE-2022-32207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32208" id="CVE-2022-32208" type="cve" title="CVE-2022-32208"/>
      <reference href="https://bugzilla.redhat.com/2099300" id="2099300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2099305" id="2099305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2099306" id="2099306" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6157.html" id="ALSA-2022:6157" type="self" title="ALSA-2022:6157"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="14.el9_0.5" epoch="0" arch="i686" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>libcurl-minimal-7.76.1-14.el9_0.5.i686.rpm</filename>
          <sum type="sha256">09b13614d1581e90fdd443a1a9015c34131b57d870ede16ec7bb82e94d92be79</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="14.el9_0.5" epoch="0" arch="i686" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>libcurl-7.76.1-14.el9_0.5.i686.rpm</filename>
          <sum type="sha256">1aa1835ebebba0e81d55ccc34cdb2e59e415487bf64f4657a4341cd3a6633de0</sum>
        </package>
        <package name="libcurl-devel" version="7.76.1" release="14.el9_0.5" epoch="0" arch="i686" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>libcurl-devel-7.76.1-14.el9_0.5.i686.rpm</filename>
          <sum type="sha256">23f2c28f2dc6f874159fd622ea094b4df7383185f8440a874fec217c411c08d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6224</id>
    <title>Moderate: openssl security and bug fix update</title>
    <issued date="2022-08-30 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: c_rehash script allows command injection (CVE-2022-1292)
* openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343)
* openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)
* openssl: the c_rehash script allows command injection (CVE-2022-2068)
* openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323)
* openssl req defaults to 3DES (BZ#2085499)
* OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508)
* OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521)
* openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554)
* Converting FIPS power-on self test to KAT (BZ#2086866)
* Small RSA keys work for some operations in FIPS mode (BZ#2091938)
* FIPS provider doesn't block RSA encryption for key transport (BZ#2091977)
* OpenSSL testsuite certificates expired (BZ#2095696)
* [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044)
* [FIPS lab review] self-test (BZ#2112978)
* [FIPS lab review] DH tuning (BZ#2115856)
* [FIPS lab review] EC tuning (BZ#2115857)
* [FIPS lab review] RSA tuning (BZ#2115858)
* [FIPS lab review] RAND tuning (BZ#2115859)
* [FIPS lab review] zeroization (BZ#2115861)
* [FIPS lab review] HKDF limitations (BZ#2118388)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6224" id="RHSA-2022:6224" type="rhsa" title="RHSA-2022:6224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1292" id="CVE-2022-1292" type="cve" title="CVE-2022-1292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1343" id="CVE-2022-1343" type="cve" title="CVE-2022-1343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1473" id="CVE-2022-1473" type="cve" title="CVE-2022-1473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2068" id="CVE-2022-2068" type="cve" title="CVE-2022-2068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2097" id="CVE-2022-2097" type="cve" title="CVE-2022-2097"/>
      <reference href="https://bugzilla.redhat.com/2081494" id="2081494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2087911" id="2087911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2087913" id="2087913" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2097310" id="2097310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104905" id="2104905" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6224.html" id="ALSA-2022:6224" type="self" title="ALSA-2022:6224"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="openssl-devel" version="3.0.1" release="41.el9_0" epoch="1" arch="i686" src="openssl-3.0.1-41.el9_0.src.rpm">
          <filename>openssl-devel-3.0.1-41.el9_0.i686.rpm</filename>
          <sum type="sha256">01db3f0440b120c0b42ff33f625678694a0c6b9db0bac0bb8dc253407d43ce92</sum>
        </package>
        <package name="openssl-libs" version="3.0.1" release="41.el9_0" epoch="1" arch="i686" src="openssl-3.0.1-41.el9_0.src.rpm">
          <filename>openssl-libs-3.0.1-41.el9_0.i686.rpm</filename>
          <sum type="sha256">a914bd989b8730edba072e45655036878cefb901a151d1dd3d283281eb6a8b84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6838</id>
    <title>Important: expat security update</title>
    <issued date="2022-10-06 00:00:00"/>
    <updated date="2022-10-07 11:50:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6838" id="RHSA-2022:6838" type="rhsa" title="RHSA-2022:6838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40674" id="CVE-2022-40674" type="cve" title="CVE-2022-40674"/>
      <reference href="https://bugzilla.redhat.com/2130769" id="2130769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6838.html" id="ALSA-2022:6838" type="self" title="ALSA-2022:6838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="expat" version="2.2.10" release="12.el9_0.3" epoch="0" arch="i686" src="expat-2.2.10-12.el9_0.3.src.rpm">
          <filename>expat-2.2.10-12.el9_0.3.i686.rpm</filename>
          <sum type="sha256">b15aae8ac238a84d4e63ed368166e19f0ba696ed450d71518de122d8cc841cb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6854</id>
    <title>Moderate: gnutls and nettle security, bug fix, and enhancement update</title>
    <issued date="2022-10-11 00:00:00"/>
    <updated date="2022-10-13 10:14:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls and nettle security, bug fix, and enhancement update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.

The following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8).

Security Fix(es):

* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589)
* Allow enabling KTLS in AlmaLinux 9.1 (BZ#2108532)
* DES-CBC bag is decryptable under FIPS (BZ#2115314)
* allow signature verification using RSA keys &lt;2k in FIPS mode (BZ#2119770)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6854" id="RHSA-2022:6854" type="rhsa" title="RHSA-2022:6854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2509" id="CVE-2022-2509" type="cve" title="CVE-2022-2509"/>
      <reference href="https://bugzilla.redhat.com/2108977" id="2108977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6854.html" id="ALSA-2022:6854" type="self" title="ALSA-2022:6854"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="gnutls" version="3.7.6" release="12.el9_0" epoch="0" arch="i686" src="gnutls-3.7.6-12.el9_0.src.rpm">
          <filename>gnutls-3.7.6-12.el9_0.i686.rpm</filename>
          <sum type="sha256">4b041c89d39b27edb5b64e50a446e38ef25bcd4d8b9f8ba97f930098f46780c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7090</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 00:00:00"/>
    <updated date="2022-10-26 12:07:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7090" id="RHSA-2022:7090" type="rhsa" title="RHSA-2022:7090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515"/>
      <reference href="https://bugzilla.redhat.com/2135610" id="2135610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7090.html" id="ALSA-2022:7090" type="self" title="ALSA-2022:7090"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="libksba" version="1.5.1" release="5.el9_0" epoch="0" arch="i686" src="libksba-1.5.1-5.el9_0.src.rpm">
          <filename>libksba-1.5.1-5.el9_0.i686.rpm</filename>
          <sum type="sha256">fcb9a502ecd923f101b7a909a5d5d55f36974c16e861620f11c73d1ad2f0782c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7185</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 06:53:24"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>device-mapper-multipath security update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7185" id="RHSA-2022:7185" type="rhsa" title="RHSA-2022:7185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41974" id="CVE-2022-41974" type="cve" title="CVE-2022-41974"/>
      <reference href="https://bugzilla.redhat.com/2133988" id="2133988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7185.html" id="ALSA-2022:7185" type="self" title="ALSA-2022:7185"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_default</name>
        <package name="device-mapper-multipath-libs" version="0.8.7" release="7.el9_0.1" epoch="0" arch="i686" src="device-mapper-multipath-0.8.7-7.el9_0.1.src.rpm">
          <filename>device-mapper-multipath-libs-0.8.7-7.el9_0.1.i686.rpm</filename>
          <sum type="sha256">203b64779691f39f5547fe841c66dd9bb7ec5f104376aa96fac893a399288996</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8267</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:56:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280)
* kernel info leak issue in pfkey_register (CVE-2022-1353)
* use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
* incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
* incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nf_tables disallow binding to already bound chain (CVE-2022-39190)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8267" id="RHSA-2022:8267" type="rhsa" title="RHSA-2022:8267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1280" id="CVE-2022-1280" type="cve" title="CVE-2022-1280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1353" id="CVE-2022-1353" type="cve" title="CVE-2022-1353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1679" id="CVE-2022-1679" type="cve" title="CVE-2022-1679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1998" id="CVE-2022-1998" type="cve" title="CVE-2022-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21123" id="CVE-2022-21123" type="cve" title="CVE-2022-21123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21125" id="CVE-2022-21125" type="cve" title="CVE-2022-21125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21166" id="CVE-2022-21166" type="cve" title="CVE-2022-21166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23816" id="CVE-2022-23816" type="cve" title="CVE-2022-23816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23825" id="CVE-2022-23825" type="cve" title="CVE-2022-23825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29900" id="CVE-2022-29900" type="cve" title="CVE-2022-29900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29901" id="CVE-2022-29901" type="cve" title="CVE-2022-29901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39190" id="CVE-2022-39190" type="cve" title="CVE-2022-39190"/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2052312" id="2052312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066819" id="2066819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2071022" id="2071022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084125" id="2084125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090226" id="2090226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090237" id="2090237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090240" id="2090240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090241" id="2090241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103148" id="2103148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103153" id="2103153" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129152" id="2129152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8267.html" id="ALSA-2022:8267" type="self" title="ALSA-2022:8267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-162.6.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">53483578c5bad0ba69290dbd463dc1f934392167f9280fa179530e1aa14b6472</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8299</id>
    <title>Low: curl security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:15:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: bad local IPv6 connection reuse (CVE-2022-27775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8299" id="RHSA-2022:8299" type="rhsa" title="RHSA-2022:8299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27775" id="CVE-2022-27775" type="cve" title="CVE-2022-27775"/>
      <reference href="https://bugzilla.redhat.com/2078388" id="2078388" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8299.html" id="ALSA-2022:8299" type="self" title="ALSA-2022:8299"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libcurl" version="7.76.1" release="19.el9" epoch="0" arch="i686" src="curl-7.76.1-19.el9.src.rpm">
          <filename>libcurl-7.76.1-19.el9.i686.rpm</filename>
          <sum type="sha256">9ff8c5b18ed2fc48c09f75ac3940af26631f8819ecc7d30e1f33acc3ae1f844a</sum>
        </package>
        <package name="libcurl-minimal" version="7.76.1" release="19.el9" epoch="0" arch="i686" src="curl-7.76.1-19.el9.src.rpm">
          <filename>libcurl-minimal-7.76.1-19.el9.i686.rpm</filename>
          <sum type="sha256">a9a8d457d1570bc3e61b74acef49648eb221a17a782a08024dac5ca88082219e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8317</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:54:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487)

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8317" id="RHSA-2022:8317" type="rhsa" title="RHSA-2022:8317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8317.html" id="ALSA-2022:8317" type="self" title="ALSA-2022:8317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="samba-common" version="4.16.4" release="101.el9" epoch="0" arch="noarch" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-common-4.16.4-101.el9.noarch.rpm</filename>
          <sum type="sha256">286b1c1bd591ecb254cc2592b59637aacf6477973e9baf964d65e858589fde24</sum>
        </package>
        <package name="samba-client-libs" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-client-libs-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">606824fc708a0e42b35970244c7105ae62219de0fab01bba993df5e42c9c6db9</sum>
        </package>
        <package name="libwbclient" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libwbclient-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">6cc4836b2917d62cbfc0fc30289d0080be01e8dbe3f04d2f2ca57e64f84eea2c</sum>
        </package>
        <package name="samba-libs" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-libs-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">7101281d4c9553d68ea5f28954c85fe00387ff0a9cce7e645e744f3cb50856c2</sum>
        </package>
        <package name="samba-common-libs" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-common-libs-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">7c1af12744197115f76466cad547a599862aad8f5060df055b65f8045d00974d</sum>
        </package>
        <package name="libsmbclient" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libsmbclient-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">9f49e4fd6ac7b73c7c1425640588588f5f4f1badef22f960eeeeb96de13b6b48</sum>
        </package>
        <package name="python3-samba" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>python3-samba-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">c369fcc3e3d8ec9c667cdf7f5d35bcb6e3d889811662a150f81edc7414ec44cd</sum>
        </package>
        <package name="samba-winbind-modules" version="4.16.4" release="101.el9" epoch="0" arch="i686" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-winbind-modules-4.16.4-101.el9.i686.rpm</filename>
          <sum type="sha256">daab6496369e5857bdb3119825433a3b2ef13005eb959a8c09cf3a0ea6477354</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8318</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:42:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libldb security, bug fix, and enhancement update</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8318" id="RHSA-2022:8318" type="rhsa" title="RHSA-2022:8318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746"/>
      <reference href="https://bugzilla.redhat.com/2108215" id="2108215" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8318.html" id="ALSA-2022:8318" type="self" title="ALSA-2022:8318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="python3-ldb" version="2.5.2" release="1.el9" epoch="0" arch="i686" src="libldb-2.5.2-1.el9.src.rpm">
          <filename>python3-ldb-2.5.2-1.el9.i686.rpm</filename>
          <sum type="sha256">27e6e2c7090e6aabafdd71a88dc87c981b6bad094371afe6e5b110e751eb0271</sum>
        </package>
        <package name="libldb" version="2.5.2" release="1.el9" epoch="0" arch="i686" src="libldb-2.5.2-1.el9.src.rpm">
          <filename>libldb-2.5.2-1.el9.i686.rpm</filename>
          <sum type="sha256">2fd167303f52307062b2f7830a753991b62b7bb9bec3b47065bd45d2f88f0885</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8340</id>
    <title>Moderate: freetype security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 22:41:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freetype security update</summary>
    <description>FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)
* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)
* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8340" id="RHSA-2022:8340" type="rhsa" title="RHSA-2022:8340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27404" id="CVE-2022-27404" type="cve" title="CVE-2022-27404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27405" id="CVE-2022-27405" type="cve" title="CVE-2022-27405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27406" id="CVE-2022-27406" type="cve" title="CVE-2022-27406"/>
      <reference href="https://bugzilla.redhat.com/2077985" id="2077985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077989" id="2077989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077991" id="2077991" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8340.html" id="ALSA-2022:8340" type="self" title="ALSA-2022:8340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="freetype" version="2.10.4" release="9.el9" epoch="0" arch="i686" src="freetype-2.10.4-9.el9.src.rpm">
          <filename>freetype-2.10.4-9.el9.i686.rpm</filename>
          <sum type="sha256">0be85a34eaff6ae7640c58d0f0148e010bfb7e69081ffd214bc74bf1fbedd50d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8353</id>
    <title>Moderate: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 22:22:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249)

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8353" id="RHSA-2022:8353" type="rhsa" title="RHSA-2022:8353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8353.html" id="ALSA-2022:8353" type="self" title="ALSA-2022:8353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="python3-libs" version="3.9.14" release="1.el9" epoch="0" arch="i686" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-libs-3.9.14-1.el9.i686.rpm</filename>
          <sum type="sha256">a758e13c72b80e4a5c037428324f8cc9133fb28c3d1c6576c62626569fd6d74a</sum>
        </package>
        <package name="python3" version="3.9.14" release="1.el9" epoch="0" arch="i686" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-3.9.14-1.el9.i686.rpm</filename>
          <sum type="sha256">fa86b057dafc18fd4d0f804c018337ec552c45dbc5d90114ddc320c5af98670d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8361</id>
    <title>Moderate: e2fsprogs security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:48:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>e2fsprogs security update</summary>
    <description>The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.

Security Fix(es):

* e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8361" id="RHSA-2022:8361" type="rhsa" title="RHSA-2022:8361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1304" id="CVE-2022-1304" type="cve" title="CVE-2022-1304"/>
      <reference href="https://bugzilla.redhat.com/2069726" id="2069726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8361.html" id="ALSA-2022:8361" type="self" title="ALSA-2022:8361"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="e2fsprogs-libs" version="1.46.5" release="3.el9" epoch="0" arch="i686" src="e2fsprogs-1.46.5-3.el9.src.rpm">
          <filename>e2fsprogs-libs-1.46.5-3.el9.i686.rpm</filename>
          <sum type="sha256">82beb32e861f64c0ef54d4c788686f1e24f6644de3052cd387b3abae1fb47219</sum>
        </package>
        <package name="libcom_err" version="1.46.5" release="3.el9" epoch="0" arch="i686" src="e2fsprogs-1.46.5-3.el9.src.rpm">
          <filename>libcom_err-1.46.5-3.el9.i686.rpm</filename>
          <sum type="sha256">932645424cafcb91fce7b3958fd1b7d353e87267175784e6f356b61ed501a845</sum>
        </package>
        <package name="libss" version="1.46.5" release="3.el9" epoch="0" arch="i686" src="e2fsprogs-1.46.5-3.el9.src.rpm">
          <filename>libss-1.46.5-3.el9.i686.rpm</filename>
          <sum type="sha256">c9ac9c74a4353f91dafb67a6ee1686cc5e23d53996ea792163358432f221e854</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8384</id>
    <title>Moderate: harfbuzz security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:35:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>harfbuzz security update</summary>
    <description>HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

* harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8384" id="RHSA-2022:8384" type="rhsa" title="RHSA-2022:8384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33068" id="CVE-2022-33068" type="cve" title="CVE-2022-33068"/>
      <reference href="https://bugzilla.redhat.com/2102608" id="2102608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8384.html" id="ALSA-2022:8384" type="self" title="ALSA-2022:8384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="harfbuzz" version="2.7.4" release="8.el9" epoch="0" arch="i686" src="harfbuzz-2.7.4-8.el9.src.rpm">
          <filename>harfbuzz-2.7.4-8.el9.i686.rpm</filename>
          <sum type="sha256">bd54f886097dd7fc0828bf5c2ef4edef50fb20a04f31c5ef967368b397dedbf2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8385</id>
    <title>Moderate: dhcp security and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:26:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dhcp security and enhancement update</summary>
    <description>The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8385" id="RHSA-2022:8385" type="rhsa" title="RHSA-2022:8385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8385.html" id="ALSA-2022:8385" type="self" title="ALSA-2022:8385"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="dhcp-common" version="4.4.2" release="17.b1.el9" epoch="12" arch="noarch" src="dhcp-4.4.2-17.b1.el9.src.rpm">
          <filename>dhcp-common-4.4.2-17.b1.el9.noarch.rpm</filename>
          <sum type="sha256">011ae50ac1857d9d985906a0a13ab1698507292e737b4050e79d069f1d404422</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8400</id>
    <title>Moderate: libtirpc security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:06:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtirpc security update</summary>
    <description>The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages.

Security Fix(es):

* libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8400" id="RHSA-2022:8400" type="rhsa" title="RHSA-2022:8400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46828" id="CVE-2021-46828" type="cve" title="CVE-2021-46828"/>
      <reference href="https://bugzilla.redhat.com/2109352" id="2109352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8400.html" id="ALSA-2022:8400" type="self" title="ALSA-2022:8400"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libtirpc" version="1.3.3" release="0.el9" epoch="0" arch="i686" src="libtirpc-1.3.3-0.el9.src.rpm">
          <filename>libtirpc-1.3.3-0.el9.i686.rpm</filename>
          <sum type="sha256">80753e3df23f1e1b2c53244378e793ca2ffd4b5bcdaec7ededa3d959c088d889</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8493</id>
    <title>Important: python3.9 security update</title>
    <issued date="2022-11-16 00:00:00"/>
    <updated date="2022-11-17 11:27:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8493" id="RHSA-2022:8493" type="rhsa" title="RHSA-2022:8493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42919" id="CVE-2022-42919" type="cve" title="CVE-2022-42919"/>
      <reference href="https://bugzilla.redhat.com/2138705" id="2138705" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8493.html" id="ALSA-2022:8493" type="self" title="ALSA-2022:8493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="python3-libs" version="3.9.14" release="1.el9_1.1" epoch="0" arch="i686" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-libs-3.9.14-1.el9_1.1.i686.rpm</filename>
          <sum type="sha256">131d866baff2fbcac297d73133147cfd3d369df9a9f61a0706c22db47143f35f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8637</id>
    <title>Important: krb5 security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:57:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8637" id="RHSA-2022:8637" type="rhsa" title="RHSA-2022:8637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42898" id="CVE-2022-42898" type="cve" title="CVE-2022-42898"/>
      <reference href="https://bugzilla.redhat.com/2140960" id="2140960" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8637.html" id="ALSA-2022:8637" type="self" title="ALSA-2022:8637"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="krb5-pkinit" version="1.19.1" release="24.el9_1" epoch="0" arch="i686" src="krb5-1.19.1-24.el9_1.src.rpm">
          <filename>krb5-pkinit-1.19.1-24.el9_1.i686.rpm</filename>
          <sum type="sha256">01c282b8dd43f4997596bc5c0d0531f8091a8f0c68805c847bf776ac40ecebe4</sum>
        </package>
        <package name="krb5-server-ldap" version="1.19.1" release="24.el9_1" epoch="0" arch="i686" src="krb5-1.19.1-24.el9_1.src.rpm">
          <filename>krb5-server-ldap-1.19.1-24.el9_1.i686.rpm</filename>
          <sum type="sha256">1074e481cea7b6e17f2554efdc6151692d954e96d6040ae39415c0f744d562b9</sum>
        </package>
        <package name="krb5-libs" version="1.19.1" release="24.el9_1" epoch="0" arch="i686" src="krb5-1.19.1-24.el9_1.src.rpm">
          <filename>krb5-libs-1.19.1-24.el9_1.i686.rpm</filename>
          <sum type="sha256">5ae846dfed2af5b0b497553dcbacf613b06eb1e3ba194617eebfd55c90add43c</sum>
        </package>
        <package name="krb5-server" version="1.19.1" release="24.el9_1" epoch="0" arch="i686" src="krb5-1.19.1-24.el9_1.src.rpm">
          <filename>krb5-server-1.19.1-24.el9_1.i686.rpm</filename>
          <sum type="sha256">a4345ad967cd254837f2600f2b0270d0f005229b20b5eb91aea83b84087db492</sum>
        </package>
        <package name="libkadm5" version="1.19.1" release="24.el9_1" epoch="0" arch="i686" src="krb5-1.19.1-24.el9_1.src.rpm">
          <filename>libkadm5-1.19.1-24.el9_1.i686.rpm</filename>
          <sum type="sha256">d25d078e3818044796f2f1c1b32c55d4390920dd3b5911475c920af10b9377a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0333</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 12:09:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: POST following PUT confusion (CVE-2022-32221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0333" id="RHSA-2023:0333" type="rhsa" title="RHSA-2023:0333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32221" id="CVE-2022-32221" type="cve" title="CVE-2022-32221"/>
      <reference href="https://bugzilla.redhat.com/2135411" id="2135411" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0333.html" id="ALSA-2023:0333" type="self" title="ALSA-2023:0333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libcurl" version="7.76.1" release="19.el9_1.1" epoch="0" arch="i686" src="curl-7.76.1-19.el9_1.1.src.rpm">
          <filename>libcurl-7.76.1-19.el9_1.1.i686.rpm</filename>
          <sum type="sha256">b2026954d9ad9d980ccfa2bc5c407d959e920cdf7766f109218f49ad3ad89ca9</sum>
        </package>
        <package name="libcurl-minimal" version="7.76.1" release="19.el9_1.1" epoch="0" arch="i686" src="curl-7.76.1-19.el9_1.1.src.rpm">
          <filename>libcurl-minimal-7.76.1-19.el9_1.1.i686.rpm</filename>
          <sum type="sha256">b73adfd153a7424a440c675e4535c1988b018673116caa4ad27d1bc92d7f3ab2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0334</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 16:35:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)
* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)
* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel 9.2: Important iavf bug fixes (BZ#2127884)
* vfio zero page mappings fail after 2M instances (BZ#2128514)
* nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359)
* ice: Driver Update to 5.19 (BZ#2132070)
* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588)
* drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619)
* updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914)
* DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213)
* No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153)
* Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168)
* ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976)
* fatal error: error in backend: Branch target out of insn range (BZ#2144902)
* AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217)
* Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910)
* Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605)
* DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0334" id="RHSA-2023:0334" type="rhsa" title="RHSA-2023:0334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2959" id="CVE-2022-2959" type="cve" title="CVE-2022-2959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3077" id="CVE-2022-3077" type="cve" title="CVE-2022-3077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103681" id="2103681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123309" id="2123309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0334.html" id="ALSA-2023:0334" type="self" title="ALSA-2023:0334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-162.12.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">adb4b616c2a57bd065fdea79a5b0b064c887d2f752177890d0f5b107d7f88594</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0335</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 17:01:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)
* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)
* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0335" id="RHSA-2023:0335" type="rhsa" title="RHSA-2023:0335"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42010" id="CVE-2022-42010" type="cve" title="CVE-2022-42010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42011" id="CVE-2022-42011" type="cve" title="CVE-2022-42011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42012" id="CVE-2022-42012" type="cve" title="CVE-2022-42012"/>
      <reference href="https://bugzilla.redhat.com/2133616" id="2133616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133617" id="2133617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133618" id="2133618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0335.html" id="ALSA-2023:0335" type="self" title="ALSA-2023:0335"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="dbus-common" version="1.12.20" release="7.el9_1" epoch="1" arch="noarch" src="dbus-1.12.20-7.el9_1.src.rpm">
          <filename>dbus-common-1.12.20-7.el9_1.noarch.rpm</filename>
          <sum type="sha256">75c6f87a0f4bac8661f16fa322d5c14cc0f4438403a80262b68dab4d4055d1b2</sum>
        </package>
        <package name="dbus-libs" version="1.12.20" release="7.el9_1" epoch="1" arch="i686" src="dbus-1.12.20-7.el9_1.src.rpm">
          <filename>dbus-libs-1.12.20-7.el9_1.i686.rpm</filename>
          <sum type="sha256">b40375a3eb52369ad3b9194ecae180cf27a7bb3630e8d0211a34700cf7375ac3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0336</id>
    <title>Moderate: systemd security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 16:16:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: buffer overrun in format_timespan() function (CVE-2022-3821)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0336" id="RHSA-2023:0336" type="rhsa" title="RHSA-2023:0336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3821" id="CVE-2022-3821" type="cve" title="CVE-2022-3821"/>
      <reference href="https://bugzilla.redhat.com/2139327" id="2139327" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0336.html" id="ALSA-2023:0336" type="self" title="ALSA-2023:0336"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="systemd-libs" version="250" release="12.el9_1.1" epoch="0" arch="i686" src="systemd-250-12.el9_1.1.src.rpm">
          <filename>systemd-libs-250-12.el9_1.1.i686.rpm</filename>
          <sum type="sha256">36f530c5f794276afea8102c339f4c8463b48840ed38ab546985d2d1a057e211</sum>
        </package>
        <package name="systemd-rpm-macros" version="250" release="12.el9_1.1" epoch="0" arch="noarch" src="systemd-250-12.el9_1.1.src.rpm">
          <filename>systemd-rpm-macros-250-12.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">5b5fcb95686b10b0292a4fc72817b28f04b841f80d603f2a97f16f6eb2ce14bc</sum>
        </package>
        <package name="systemd-container" version="250" release="12.el9_1.1" epoch="0" arch="i686" src="systemd-250-12.el9_1.1.src.rpm">
          <filename>systemd-container-250-12.el9_1.1.i686.rpm</filename>
          <sum type="sha256">814957bf50f3ac44c46faff4940107dd33f2b1b85bf3d627ceef824f560cb00c</sum>
        </package>
        <package name="systemd" version="250" release="12.el9_1.1" epoch="0" arch="i686" src="systemd-250-12.el9_1.1.src.rpm">
          <filename>systemd-250-12.el9_1.1.i686.rpm</filename>
          <sum type="sha256">9cf913819a08571d6f247489dde7de73ce29a32e849fda7d84453331d49aa9aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0337</id>
    <title>Moderate: expat security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:55:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (CVE-2022-43680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0337" id="RHSA-2023:0337" type="rhsa" title="RHSA-2023:0337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43680" id="CVE-2022-43680" type="cve" title="CVE-2022-43680"/>
      <reference href="https://bugzilla.redhat.com/2140059" id="2140059" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0337.html" id="ALSA-2023:0337" type="self" title="ALSA-2023:0337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="expat" version="2.4.9" release="1.el9_1.1" epoch="0" arch="i686" src="expat-2.4.9-1.el9_1.1.src.rpm">
          <filename>expat-2.4.9-1.el9_1.1.i686.rpm</filename>
          <sum type="sha256">a9b52a96a7c5e8a01a722f116ed9defe3f674176ed802b5446292cc242a2bf1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0338</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 14:32:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)
* libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0338" id="RHSA-2023:0338" type="rhsa" title="RHSA-2023:0338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40303" id="CVE-2022-40303" type="cve" title="CVE-2022-40303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40304" id="CVE-2022-40304" type="cve" title="CVE-2022-40304"/>
      <reference href="https://bugzilla.redhat.com/2136266" id="2136266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136288" id="2136288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0338.html" id="ALSA-2023:0338" type="self" title="ALSA-2023:0338"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libxml2" version="2.9.13" release="3.el9_1" epoch="0" arch="i686" src="libxml2-2.9.13-3.el9_1.src.rpm">
          <filename>libxml2-2.9.13-3.el9_1.i686.rpm</filename>
          <sum type="sha256">268c401ca2f21e6fdbe735f57fbf9fb6ba1870df87c63aa6c5b24fc267afc091</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0339</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:00:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0339" id="RHSA-2023:0339" type="rhsa" title="RHSA-2023:0339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35737" id="CVE-2022-35737" type="cve" title="CVE-2022-35737"/>
      <reference href="https://bugzilla.redhat.com/2110291" id="2110291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0339.html" id="ALSA-2023:0339" type="self" title="ALSA-2023:0339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="sqlite-libs" version="3.34.1" release="6.el9_1" epoch="0" arch="i686" src="sqlite-3.34.1-6.el9_1.src.rpm">
          <filename>sqlite-libs-3.34.1-6.el9_1.i686.rpm</filename>
          <sum type="sha256">00328fb91c673003f2e8012a1f4f625eaa4fc744a8a595b70c3275b6a8ee7ce5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0343</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:40:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0343" id="RHSA-2023:0343" type="rhsa" title="RHSA-2023:0343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46848" id="CVE-2021-46848" type="cve" title="CVE-2021-46848"/>
      <reference href="https://bugzilla.redhat.com/2140058" id="2140058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0343.html" id="ALSA-2023:0343" type="self" title="ALSA-2023:0343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libtasn1" version="4.16.0" release="8.el9_1" epoch="0" arch="i686" src="libtasn1-4.16.0-8.el9_1.src.rpm">
          <filename>libtasn1-4.16.0-8.el9_1.i686.rpm</filename>
          <sum type="sha256">9cbd11277e89bd0d4a80900bee01ca71b0c582c9cb5744f5035135b2ed907c85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0626</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 16:00:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0626" id="RHSA-2023:0626" type="rhsa" title="RHSA-2023:0626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629"/>
      <reference href="https://bugzilla.redhat.com/2161571" id="2161571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0626.html" id="ALSA-2023:0626" type="self" title="ALSA-2023:0626"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libksba" version="1.5.1" release="6.el9_1" epoch="0" arch="i686" src="libksba-1.5.1-6.el9_1.src.rpm">
          <filename>libksba-1.5.1-6.el9_1.i686.rpm</filename>
          <sum type="sha256">bab03b2be16b504f1aadf2af62dacbe0f66a8120baf70c4354f2fdb431173e85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0752</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2023-02-14 00:00:00"/>
    <updated date="2023-02-14 18:51:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass (CVE-2022-2601)
* grub2: Heap based out-of-bounds write when redering certain unicode sequences (CVE-2022-3775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0752" id="RHSA-2023:0752" type="rhsa" title="RHSA-2023:0752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2601" id="CVE-2022-2601" type="cve" title="CVE-2022-2601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3775" id="CVE-2022-3775" type="cve" title="CVE-2022-3775"/>
      <reference href="https://bugzilla.redhat.com/2112975" id="2112975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2138880" id="2138880" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0752.html" id="ALSA-2023:0752" type="self" title="ALSA-2023:0752"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="grub2-common" version="2.06" release="46.el9_1.3.alma" epoch="1" arch="noarch" src="grub2-2.06-46.el9_1.3.alma.src.rpm">
          <filename>grub2-common-2.06-46.el9_1.3.alma.noarch.rpm</filename>
          <sum type="sha256">3d7943591c3cb72c5c1c2d0b121c33aa63616191a20b0ac166476e682a726637</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.06" release="46.el9_1.3.alma" epoch="1" arch="noarch" src="grub2-2.06-46.el9_1.3.alma.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-46.el9_1.3.alma.noarch.rpm</filename>
          <sum type="sha256">5b6f1faa4ae5339ce884ee06acee48e704732f35490d956b6bd8ef40f54bd2d1</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="46.el9_1.3.alma" epoch="1" arch="noarch" src="grub2-2.06-46.el9_1.3.alma.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-46.el9_1.3.alma.noarch.rpm</filename>
          <sum type="sha256">82ba3017d2f07ad9ca07ec640bf5bc5278ec56021f17199e8d3e98f0951b3d7b</sum>
        </package>
        <package name="grub2-pc-modules" version="2.06" release="46.el9_1.3.alma" epoch="1" arch="noarch" src="grub2-2.06-46.el9_1.3.alma.src.rpm">
          <filename>grub2-pc-modules-2.06-46.el9_1.3.alma.noarch.rpm</filename>
          <sum type="sha256">98b06fac39d220136e99deec52b95840c38240bf9b56210a5010600b6f57faa1</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="46.el9_1.3.alma" epoch="1" arch="noarch" src="grub2-2.06-46.el9_1.3.alma.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-46.el9_1.3.alma.noarch.rpm</filename>
          <sum type="sha256">bb7dbf92409f9a739e2f7009a330c2c8fd7827db40118327f4ab18639a16c82d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0946</id>
    <title>Moderate: openssl security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:18:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: read buffer overflow in X.509 certificate verification (CVE-2022-4203)
* openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
* openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
* openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)
* openssl: invalid pointer dereference in d2i_PKCS7 functions (CVE-2023-0216)
* openssl: NULL dereference validating DSA public key (CVE-2023-0217)
* openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
* openssl: NULL dereference during PKCS7 data verification (CVE-2023-0401)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* HMAC generation should reject key lengths &lt; 112 bits or provide an indicator in FIPS mode (BZ#2144000)
* In FIPS mode, openssl should set a minimum length for passwords in PBKDF2 (BZ#2144003)
* stunnel consumes high amount of memory when pestered with TCP connections without a TLS handshake (BZ#2144008)
* In FIPS mode, openssl should reject SHAKE as digest for RSA-OAEP or provide an indicator (BZ#2144010)
* In FIPS mode, openssl should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144012)
* In FIPS mode, openssl should reject RSA signatures with X9.31 padding, or provide an indicator (BZ#2144015)
* In FIPS mode, openssl should reject SHA-224, SHA-384, SHA-512-224, and SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after 2023-05-16 (BZ#2144017)
* In FIPS mode, openssl should reject KDF input and output key lengths &lt; 112 bits or provide an indicator (BZ#2144019)
* In FIPS mode, openssl should reject RSA keys &lt; 2048 bits when using EVP_PKEY_decapsulate, or provide an indicator (BZ#2145170)
* AlmaLinux9.1 Nightly[0912] - error:03000093:digital envelope routines::command not supported when git clone is run with configured ibmca engine backed by libica.so.4 (OpenSSL 3.0) (BZ#2149010)
* OpenSSL FIPS checksum code needs update (BZ#2158412)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0946" id="RHSA-2023:0946" type="rhsa" title="RHSA-2023:0946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4203" id="CVE-2022-4203" type="cve" title="CVE-2022-4203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4304" id="CVE-2022-4304" type="cve" title="CVE-2022-4304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4450" id="CVE-2022-4450" type="cve" title="CVE-2022-4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0215" id="CVE-2023-0215" type="cve" title="CVE-2023-0215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0216" id="CVE-2023-0216" type="cve" title="CVE-2023-0216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0217" id="CVE-2023-0217" type="cve" title="CVE-2023-0217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0286" id="CVE-2023-0286" type="cve" title="CVE-2023-0286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0401" id="CVE-2023-0401" type="cve" title="CVE-2023-0401"/>
      <reference href="https://bugzilla.redhat.com/2164440" id="2164440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164487" id="2164487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164488" id="2164488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164492" id="2164492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164494" id="2164494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164497" id="2164497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164499" id="2164499" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164500" id="2164500" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0946.html" id="ALSA-2023:0946" type="self" title="ALSA-2023:0946"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="openssl-libs" version="3.0.1" release="47.el9_1" epoch="1" arch="i686" src="openssl-3.0.1-47.el9_1.src.rpm">
          <filename>openssl-libs-3.0.1-47.el9_1.i686.rpm</filename>
          <sum type="sha256">57df9f5e63ab39844acc175505d7d88ca13920970831afbc756883ac4596b2ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0951</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379)
* kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083)
* AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085)
* AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274)
* qla2xxx NVMe-FC:  WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178)
* Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277)
* Scheduler Update (almalinux9.2) (BZ#2153792)
* AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305)
* MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145)
* Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459)
* Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930)
* The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815)
* AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344)
* CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418)
* block layer: update with upstream v6.0 (BZ#2162535)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0951" id="RHSA-2023:0951" type="rhsa" title="RHSA-2023:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3564" id="CVE-2022-3564" type="cve" title="CVE-2022-3564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4379" id="CVE-2022-4379" type="cve" title="CVE-2022-4379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0179" id="CVE-2023-0179" type="cve" title="CVE-2023-0179"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150999" id="2150999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152807" id="2152807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161713" id="2161713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0951.html" id="ALSA-2023:0951" type="self" title="ALSA-2023:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-162.18.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">11a481a9ca1eb69dcd65b0876fb8bd21cb73e80e2efb913bd33c2f9d814a677f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0952</id>
    <title>Moderate: python-setuptools security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:39:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-setuptools security update</summary>
    <description>The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.

Security Fix(es):

* pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0952" id="RHSA-2023:0952" type="rhsa" title="RHSA-2023:0952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40897" id="CVE-2022-40897" type="cve" title="CVE-2022-40897"/>
      <reference href="https://bugzilla.redhat.com/2158559" id="2158559" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0952.html" id="ALSA-2023:0952" type="self" title="ALSA-2023:0952"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="python3-setuptools-wheel" version="53.0.0" release="10.el9_1.1" epoch="0" arch="noarch" src="python-setuptools-53.0.0-10.el9_1.1.src.rpm">
          <filename>python3-setuptools-wheel-53.0.0-10.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">99bd05d0b078d46b51d11d727c21305e93d7d9a52a43b622d926b9b10658a756</sum>
        </package>
        <package name="python3-setuptools" version="53.0.0" release="10.el9_1.1" epoch="0" arch="noarch" src="python-setuptools-53.0.0-10.el9_1.1.src.rpm">
          <filename>python3-setuptools-53.0.0-10.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">bef4e0eb356f420b754a5d0983a2339389d354a2d0c5c04d548fe97dba555337</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0953</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:44:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0953" id="RHSA-2023:0953" type="rhsa" title="RHSA-2023:0953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0953.html" id="ALSA-2023:0953" type="self" title="ALSA-2023:0953"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="python3-libs" version="3.9.14" release="1.el9_1.2" epoch="0" arch="i686" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-libs-3.9.14-1.el9_1.2.i686.rpm</filename>
          <sum type="sha256">9af26315d45bb8d251c316326b139bccef8d848aa04baa86bbc6f5b7c1e2f71d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0954</id>
    <title>Moderate: systemd security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:55:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415)
* systemd: deadlock in systemd-coredump via a crash with a long backtrace (CVE-2022-45873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0954" id="RHSA-2023:0954" type="rhsa" title="RHSA-2023:0954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4415" id="CVE-2022-4415" type="cve" title="CVE-2022-4415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45873" id="CVE-2022-45873" type="cve" title="CVE-2022-45873"/>
      <reference href="https://bugzilla.redhat.com/2149063" id="2149063" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2155515" id="2155515" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0954.html" id="ALSA-2023:0954" type="self" title="ALSA-2023:0954"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="systemd" version="250" release="12.el9_1.3" epoch="0" arch="i686" src="systemd-250-12.el9_1.3.src.rpm">
          <filename>systemd-250-12.el9_1.3.i686.rpm</filename>
          <sum type="sha256">4c06fd5f20819dab2266107b7a379ec4c8eaa34c3557dae00b332c201caa4f04</sum>
        </package>
        <package name="systemd-libs" version="250" release="12.el9_1.3" epoch="0" arch="i686" src="systemd-250-12.el9_1.3.src.rpm">
          <filename>systemd-libs-250-12.el9_1.3.i686.rpm</filename>
          <sum type="sha256">aa27f236e83a6d5c416cc0929021ffcfba94edd84db9aa83c366ebdadd04615a</sum>
        </package>
        <package name="systemd-container" version="250" release="12.el9_1.3" epoch="0" arch="i686" src="systemd-250-12.el9_1.3.src.rpm">
          <filename>systemd-container-250-12.el9_1.3.i686.rpm</filename>
          <sum type="sha256">b405f3a1768d29e774001f4fffed0a1ebcce22a0841fa40ef1283b94efd9871f</sum>
        </package>
        <package name="systemd-rpm-macros" version="250" release="12.el9_1.3" epoch="0" arch="noarch" src="systemd-250-12.el9_1.3.src.rpm">
          <filename>systemd-rpm-macros-250-12.el9_1.3.noarch.rpm</filename>
          <sum type="sha256">d2023ff61a09883c61c8d282420cba9a773f1e546c7bbf51b6e2eb7135a78832</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0957</id>
    <title>Moderate: lua security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:03:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964)
* lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0957" id="RHSA-2023:0957" type="rhsa" title="RHSA-2023:0957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43519" id="CVE-2021-43519" type="cve" title="CVE-2021-43519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44964" id="CVE-2021-44964" type="cve" title="CVE-2021-44964"/>
      <reference href="https://bugzilla.redhat.com/2047672" id="2047672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064772" id="2064772" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0957.html" id="ALSA-2023:0957" type="self" title="ALSA-2023:0957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="lua-libs" version="5.4.4" release="2.el9_1" epoch="0" arch="i686" src="lua-5.4.4-2.el9_1.src.rpm">
          <filename>lua-libs-5.4.4-2.el9_1.i686.rpm</filename>
          <sum type="sha256">9383e10ccde5ee9c72d2603155524e3543d8560a66cf4971e164c8eea83a6dba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0958</id>
    <title>Moderate: vim security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:13:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0958" id="RHSA-2023:0958" type="rhsa" title="RHSA-2023:0958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47024" id="CVE-2022-47024" type="cve" title="CVE-2022-47024"/>
      <reference href="https://bugzilla.redhat.com/2163613" id="2163613" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0958.html" id="ALSA-2023:0958" type="self" title="ALSA-2023:0958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="20.el9_1" epoch="2" arch="noarch" src="vim-8.2.2637-20.el9_1.src.rpm">
          <filename>vim-filesystem-8.2.2637-20.el9_1.noarch.rpm</filename>
          <sum type="sha256">99d5d7915850f5486a61fc21fd3a3963350896a289c8af304ba331b0c5577def</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1141</id>
    <title>Moderate: gnutls security and bug fix update</title>
    <issued date="2023-03-07 00:00:00"/>
    <updated date="2023-03-13 11:03:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security and bug fix update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* CCM tag length should be limited to known values (BZ#2144535)
* In FIPS mode, gnutls should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144537)
* dracut-cmdline[554]: Error in GnuTLS initialization: Error while performing self checks i FIPS mode (BZ#2149640)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1141" id="RHSA-2023:1141" type="rhsa" title="RHSA-2023:1141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0361" id="CVE-2023-0361" type="cve" title="CVE-2023-0361"/>
      <reference href="https://bugzilla.redhat.com/2162596" id="2162596" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1141.html" id="ALSA-2023:1141" type="self" title="ALSA-2023:1141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="gnutls" version="3.7.6" release="18.el9_1" epoch="0" arch="i686" src="gnutls-3.7.6-18.el9_1.src.rpm">
          <filename>gnutls-3.7.6-18.el9_1.i686.rpm</filename>
          <sum type="sha256">dbd1f68977f56a24910bd76529454cb864978bf299fef3932c675b7f178614ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1470</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-03-27 00:00:00"/>
    <updated date="2023-03-27 21:59:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880)
* Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766)
* AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528)
* kernel-rt-debug: WARNING: possible circular locking dependency detected (&amp;n-&gt;list_lock-&gt;&amp;p-&gt;pi_lock-&gt;&amp;lock-&gt;wait_lock) (BZ#2160614)
* Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105)
* AlmaLinux9.0 -  s390/kexec: fix ipl report address for kdump (BZ#2166903)
* libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956)
* Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227)

Enhancement(s):

* IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304)
* Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1470" id="RHSA-2023:1470" type="rhsa" title="RHSA-2023:1470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156322" id="2156322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1470.html" id="ALSA-2023:1470" type="self" title="ALSA-2023:1470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-162.22.2.el9_1.noarch.rpm</filename>
          <sum type="sha256">80fdc72f3a0ffe03cdbdd1fd409d9cd801d01ec1b1d8eecca7adda8905776494</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1701</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:09:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: HTTP multi-header compression denial of service (CVE-2023-23916)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1701" id="RHSA-2023:1701" type="rhsa" title="RHSA-2023:1701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23916" id="CVE-2023-23916" type="cve" title="CVE-2023-23916"/>
      <reference href="https://bugzilla.redhat.com/2167815" id="2167815" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1701.html" id="ALSA-2023:1701" type="self" title="ALSA-2023:1701"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="libcurl" version="7.76.1" release="19.el9_1.2" epoch="0" arch="i686" src="curl-7.76.1-19.el9_1.2.src.rpm">
          <filename>libcurl-7.76.1-19.el9_1.2.i686.rpm</filename>
          <sum type="sha256">3600dec0ee5207b9a5bc67b00b4b3d49ad4fdcee2a887fe891d71c5924d2510a</sum>
        </package>
        <package name="libcurl-minimal" version="7.76.1" release="19.el9_1.2" epoch="0" arch="i686" src="curl-7.76.1-19.el9_1.2.src.rpm">
          <filename>libcurl-minimal-7.76.1-19.el9_1.2.i686.rpm</filename>
          <sum type="sha256">60d6a1adab3976b5a3f8f83167abf8022c441c4f87bbd3db6b7052ca7d8f2a71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1703</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:34:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361)
* AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1703" id="RHSA-2023:1703" type="rhsa" title="RHSA-2023:1703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1703.html" id="ALSA-2023:1703" type="self" title="ALSA-2023:1703"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-162.23.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">b135c414b00bd0e1996b535e19247e464b2e8a688b699a363c0215ae00b05ad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2127</id>
    <title>Important: samba security update</title>
    <issued date="2023-05-04 00:00:00"/>
    <updated date="2023-05-05 10:51:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2127" id="RHSA-2023:2127" type="rhsa" title="RHSA-2023:2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2127.html" id="ALSA-2023:2127" type="self" title="ALSA-2023:2127"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_1_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_1_default</name>
        <package name="samba-winbind-modules" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-winbind-modules-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">044d5b90a3636e1c4338231c61bbacadd48cbc341ec3cbe0e1956a27eece82de</sum>
        </package>
        <package name="samba-libs" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-libs-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">97e822576c5c403e5d4c725e6de3429638b5a47ce78c055a837dc10af7173de3</sum>
        </package>
        <package name="samba-client-libs" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-client-libs-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">9c47dcf146ed04f2fc9f128aab6d5a4b787822bc1edec9e26c3b9f297dd3a94e</sum>
        </package>
        <package name="python3-samba" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>python3-samba-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">a689d4529356aae314cf655b8efc2256dd3c943895e733eb8d88528283f0ecba</sum>
        </package>
        <package name="samba-common-libs" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-common-libs-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">ab5350195e2197777d7224ab2cb9333f0b086da85b397e532f3347e6b45f7f58</sum>
        </package>
        <package name="libwbclient" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libwbclient-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">d3854d24643396807c5080eea0ea8ab69c51b807f85dbf8d4bcd731ee551ff3a</sum>
        </package>
        <package name="samba-common" version="4.16.4" release="103.el9_1" epoch="0" arch="noarch" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-common-4.16.4-103.el9_1.noarch.rpm</filename>
          <sum type="sha256">dd6dfd9947cdd7677fbe43d5934de0182ba8462ebe6bb4abbe60cd884f86dbe4</sum>
        </package>
        <package name="libsmbclient" version="4.16.4" release="103.el9_1" epoch="0" arch="i686" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libsmbclient-4.16.4-103.el9_1.i686.rpm</filename>
          <sum type="sha256">f742ae8cbff4e23c8bb29d2c40fc3caa3bed813e8f068b0cacb4b716f519b224</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2458</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:34:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
* cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
* use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882)
* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
* out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435)
* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
* memory leak in ipv6_renew_options() (CVE-2022-3524)
* data races around icsk-&gt;icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
* data races around sk-&gt;sk_prot (CVE-2022-3567)
* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
* use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)
* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
* mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128)
* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
* lockdown bypass using IMA (CVE-2022-21505)
* double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)
* network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743)
* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
* Denial of service in beacon protection for P2P-device (CVE-2022-42722)
* memory corruption in usbmon driver (CVE-2022-43750)
* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
* use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)
* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
* denial of service in tipc_conn_close (CVE-2023-1382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2458" id="RHSA-2023:2458" type="rhsa" title="RHSA-2023:2458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-26341" id="CVE-2021-26341" type="cve" title="CVE-2021-26341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33655" id="CVE-2021-33655" type="cve" title="CVE-2021-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1462" id="CVE-2022-1462" type="cve" title="CVE-2022-1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1789" id="CVE-2022-1789" type="cve" title="CVE-2022-1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1882" id="CVE-2022-1882" type="cve" title="CVE-2022-1882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20141" id="CVE-2022-20141" type="cve" title="CVE-2022-20141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21505" id="CVE-2022-21505" type="cve" title="CVE-2022-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2196" id="CVE-2022-2196" type="cve" title="CVE-2022-2196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2663" id="CVE-2022-2663" type="cve" title="CVE-2022-2663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28388" id="CVE-2022-28388" type="cve" title="CVE-2022-28388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3028" id="CVE-2022-3028" type="cve" title="CVE-2022-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33743" id="CVE-2022-33743" type="cve" title="CVE-2022-33743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3435" id="CVE-2022-3435" type="cve" title="CVE-2022-3435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3522" id="CVE-2022-3522" type="cve" title="CVE-2022-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3524" id="CVE-2022-3524" type="cve" title="CVE-2022-3524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3566" id="CVE-2022-3566" type="cve" title="CVE-2022-3566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3567" id="CVE-2022-3567" type="cve" title="CVE-2022-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3619" id="CVE-2022-3619" type="cve" title="CVE-2022-3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3623" id="CVE-2022-3623" type="cve" title="CVE-2022-3623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3625" id="CVE-2022-3625" type="cve" title="CVE-2022-3625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3628" id="CVE-2022-3628" type="cve" title="CVE-2022-3628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3640" id="CVE-2022-3640" type="cve" title="CVE-2022-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3707" id="CVE-2022-3707" type="cve" title="CVE-2022-3707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39188" id="CVE-2022-39188" type="cve" title="CVE-2022-39188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39189" id="CVE-2022-39189" type="cve" title="CVE-2022-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4128" id="CVE-2022-4128" type="cve" title="CVE-2022-4128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4129" id="CVE-2022-4129" type="cve" title="CVE-2022-4129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41674" id="CVE-2022-41674" type="cve" title="CVE-2022-41674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42703" id="CVE-2022-42703" type="cve" title="CVE-2022-42703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42720" id="CVE-2022-42720" type="cve" title="CVE-2022-42720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42721" id="CVE-2022-42721" type="cve" title="CVE-2022-42721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42722" id="CVE-2022-42722" type="cve" title="CVE-2022-42722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42896" id="CVE-2022-42896" type="cve" title="CVE-2022-42896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43750" id="CVE-2022-43750" type="cve" title="CVE-2022-43750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47929" id="CVE-2022-47929" type="cve" title="CVE-2022-47929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0394" id="CVE-2023-0394" type="cve" title="CVE-2023-0394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0461" id="CVE-2023-0461" type="cve" title="CVE-2023-0461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0590" id="CVE-2023-0590" type="cve" title="CVE-2023-0590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1195" id="CVE-2023-1195" type="cve" title="CVE-2023-1195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1382" id="CVE-2023-1382" type="cve" title="CVE-2023-1382"/>
      <reference href="https://bugzilla.redhat.com/2061703" id="2061703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073091" id="2073091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078466" id="2078466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089701" id="2089701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090723" id="2090723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106830" id="2106830" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107924" id="2107924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108691" id="2108691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114937" id="2114937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122228" id="2122228" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123056" id="2123056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124788" id="2124788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130141" id="2130141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133483" id="2133483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133490" id="2133490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134377" id="2134377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134380" id="2134380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134451" id="2134451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134506" id="2134506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134517" id="2134517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134528" id="2134528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137979" id="2137979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139610" id="2139610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143893" id="2143893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143943" id="2143943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144720" id="2144720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147364" id="2147364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150947" id="2150947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150960" id="2150960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150979" id="2150979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151270" id="2151270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154171" id="2154171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154235" id="2154235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160023" id="2160023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162120" id="2162120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165721" id="2165721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165741" id="2165741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168246" id="2168246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176192" id="2176192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177371" id="2177371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2458.html" id="ALSA-2023:2458" type="self" title="ALSA-2023:2458"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="noarch" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-284.11.1.el9_2.noarch.rpm</filename>
          <sum type="sha256">6be8411731ede08f9c4ab2586f894d960bb594d0b7b61059fb91ceb3c02f5c1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2459</id>
    <title>Moderate: device-mapper-multipath security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:16:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>device-mapper-multipath security and bug fix update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2459" id="RHSA-2023:2459" type="rhsa" title="RHSA-2023:2459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41973" id="CVE-2022-41973" type="cve" title="CVE-2022-41973"/>
      <reference href="https://bugzilla.redhat.com/2123894" id="2123894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2459.html" id="ALSA-2023:2459" type="self" title="ALSA-2023:2459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="device-mapper-multipath-libs" version="0.8.7" release="20.el9" epoch="0" arch="i686" src="device-mapper-multipath-0.8.7-20.el9.src.rpm">
          <filename>device-mapper-multipath-libs-0.8.7-20.el9.i686.rpm</filename>
          <sum type="sha256">d54577de025b30eafef80740830d88cb70174ade9eb884ea1b21a0a3b6156469</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2478</id>
    <title>Low: curl security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 02:58:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: Incorrect handling of control code characters in cookies (CVE-2022-35252)
* curl: Use-after-free triggered by an HTTP proxy deny response (CVE-2022-43552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2478" id="RHSA-2023:2478" type="rhsa" title="RHSA-2023:2478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35252" id="CVE-2022-35252" type="cve" title="CVE-2022-35252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43552" id="CVE-2022-43552" type="cve" title="CVE-2022-43552"/>
      <reference href="https://bugzilla.redhat.com/2120718" id="2120718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152652" id="2152652" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2478.html" id="ALSA-2023:2478" type="self" title="ALSA-2023:2478"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libcurl" version="7.76.1" release="23.el9" epoch="0" arch="i686" src="curl-7.76.1-23.el9.src.rpm">
          <filename>libcurl-7.76.1-23.el9.i686.rpm</filename>
          <sum type="sha256">13ae11f2747287adf73507995209c6d5cc013f05211af88c97f3a4917bbde881</sum>
        </package>
        <package name="libcurl-minimal" version="7.76.1" release="23.el9" epoch="0" arch="i686" src="curl-7.76.1-23.el9.src.rpm">
          <filename>libcurl-minimal-7.76.1-23.el9.i686.rpm</filename>
          <sum type="sha256">855fbf53ccab397188f46a904e4886801b81f8a0788c9e3dbb4f0cdceca5da4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2502</id>
    <title>Moderate: dhcp security and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 02:31:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dhcp security and enhancement update</summary>
    <description>The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

* dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort (CVE-2022-2928)
* dhcp: DHCP memory leak (CVE-2022-2929)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2502" id="RHSA-2023:2502" type="rhsa" title="RHSA-2023:2502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2928" id="CVE-2022-2928" type="cve" title="CVE-2022-2928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2929" id="CVE-2022-2929" type="cve" title="CVE-2022-2929"/>
      <reference href="https://bugzilla.redhat.com/2132001" id="2132001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132002" id="2132002" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2502.html" id="ALSA-2023:2502" type="self" title="ALSA-2023:2502"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="dhcp-common" version="4.4.2" release="18.b1.el9" epoch="12" arch="noarch" src="dhcp-4.4.2-18.b1.el9.src.rpm">
          <filename>dhcp-common-4.4.2-18.b1.el9.noarch.rpm</filename>
          <sum type="sha256">6183ab9530f3f44ffe2cbf3f36a7c77ece97ade19ab10ee0f38237e64876f729</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2519</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:40:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2519" id="RHSA-2023:2519" type="rhsa" title="RHSA-2023:2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2519.html" id="ALSA-2023:2519" type="self" title="ALSA-2023:2519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="samba-dc-libs" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-dc-libs-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">2173d50554d21d88c29897fb0a9234a5cf13379d848f08be04ff00725ff3f015</sum>
        </package>
        <package name="samba-common" version="4.17.5" release="102.el9" epoch="0" arch="noarch" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-common-4.17.5-102.el9.noarch.rpm</filename>
          <sum type="sha256">30026c9e6d9599fbc0fbcbed5e9c147c1d58f0ea2938d8dcdb2f9db98e278768</sum>
        </package>
        <package name="libsmbclient" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libsmbclient-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">4e7324df558b52a21171e6600c838392e0feefcec40aced82496ecae4f020aee</sum>
        </package>
        <package name="samba-libs" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-libs-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">5869e0275e1a1a1b335748709fc7842f1cae7683a2197a88add80464eb70ead1</sum>
        </package>
        <package name="libwbclient" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libwbclient-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">96a76a8030e3fb821249fb3f28790b36dcbad3106beb6cb27038eeae12afd467</sum>
        </package>
        <package name="samba-client-libs" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-client-libs-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">9a894aebb45d3876680bc8b9dbcd35c71f48f8a654d2d950a2bced65d96e1040</sum>
        </package>
        <package name="libnetapi" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libnetapi-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">b35c295756123e6f2c9c704918cf4181fead503d9be832a95a5659b6257d1c2c</sum>
        </package>
        <package name="samba-winbind-modules" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-winbind-modules-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">b7775da6b97a7883e055b32bcc1635385df321f4699d62aeaf64fabd196700dd</sum>
        </package>
        <package name="python3-samba" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>python3-samba-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">d0b7f25ca705be6bb9bfd2df142e95b563ebd06f190503c87239085b30b74c64</sum>
        </package>
        <package name="samba-common-libs" version="4.17.5" release="102.el9" epoch="0" arch="i686" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-common-libs-4.17.5-102.el9.i686.rpm</filename>
          <sum type="sha256">fa1b610b346fed1105bc06bbf3a814804679fac632879f0f6926bb636697894c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2523</id>
    <title>Low: openssl security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 01:58:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2523" id="RHSA-2023:2523" type="rhsa" title="RHSA-2023:2523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3358" id="CVE-2022-3358" type="cve" title="CVE-2022-3358"/>
      <reference href="https://bugzilla.redhat.com/2134740" id="2134740" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2523.html" id="ALSA-2023:2523" type="self" title="ALSA-2023:2523"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="openssl-libs" version="3.0.7" release="6.el9_2" epoch="1" arch="i686" src="openssl-3.0.7-6.el9_2.src.rpm">
          <filename>openssl-libs-3.0.7-6.el9_2.i686.rpm</filename>
          <sum type="sha256">8eac085be15c4a76d3186a244c408f5e4d42f989f3efda10bae9233efe4bc857</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2532</id>
    <title>Low: libarchive security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 01:18:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2532" id="RHSA-2023:2532" type="rhsa" title="RHSA-2023:2532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36227" id="CVE-2022-36227" type="cve" title="CVE-2022-36227"/>
      <reference href="https://bugzilla.redhat.com/2144972" id="2144972" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2532.html" id="ALSA-2023:2532" type="self" title="ALSA-2023:2532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libarchive" version="3.5.3" release="4.el9" epoch="0" arch="i686" src="libarchive-3.5.3-4.el9.src.rpm">
          <filename>libarchive-3.5.3-4.el9.i686.rpm</filename>
          <sum type="sha256">aac77eecbe6eeaacfb047c7afa1cebfdba346e9f62ac2c3c8750fca18a9f6e91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2570</id>
    <title>Moderate: krb5 security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 00:45:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security, bug fix, and enhancement update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

The following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312)

Security Fix(es):

* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2570" id="RHSA-2023:2570" type="rhsa" title="RHSA-2023:2570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-17049" id="CVE-2020-17049" type="cve" title="CVE-2020-17049"/>
      <reference href="https://bugzilla.redhat.com/2025721" id="2025721" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2570.html" id="ALSA-2023:2570" type="self" title="ALSA-2023:2570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="krb5-libs" version="1.20.1" release="8.el9" epoch="0" arch="i686" src="krb5-1.20.1-8.el9.src.rpm">
          <filename>krb5-libs-1.20.1-8.el9.i686.rpm</filename>
          <sum type="sha256">50b56334189408a8c495f39df375ccbfd569c25c3a4fceabcd17aeb793d5eab7</sum>
        </package>
        <package name="libkadm5" version="1.20.1" release="8.el9" epoch="0" arch="i686" src="krb5-1.20.1-8.el9.src.rpm">
          <filename>libkadm5-1.20.1-8.el9.i686.rpm</filename>
          <sum type="sha256">c736f4307fe3a40180044a475ff811a4b09f2773b610636c62f45f59aa5bb402</sum>
        </package>
        <package name="krb5-server" version="1.20.1" release="8.el9" epoch="0" arch="i686" src="krb5-1.20.1-8.el9.src.rpm">
          <filename>krb5-server-1.20.1-8.el9.i686.rpm</filename>
          <sum type="sha256">ca71b2a8396a47653231e5ed64edb5606cf34c554628a1494148a3cb6b39bd70</sum>
        </package>
        <package name="krb5-pkinit" version="1.20.1" release="8.el9" epoch="0" arch="i686" src="krb5-1.20.1-8.el9.src.rpm">
          <filename>krb5-pkinit-1.20.1-8.el9.i686.rpm</filename>
          <sum type="sha256">e41dce27746799191b01cbd03d3e5bb920323a7f724ed4dc8bbc47296e0c61ce</sum>
        </package>
        <package name="krb5-server-ldap" version="1.20.1" release="8.el9" epoch="0" arch="i686" src="krb5-1.20.1-8.el9.src.rpm">
          <filename>krb5-server-ldap-1.20.1-8.el9.i686.rpm</filename>
          <sum type="sha256">e768a5c87623a40197b57607825e6da16772acff5a6f24e503ae2d81b7904282</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2582</id>
    <title>Low: lua security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:51:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overread (CVE-2022-28805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2582" id="RHSA-2023:2582" type="rhsa" title="RHSA-2023:2582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28805" id="CVE-2022-28805" type="cve" title="CVE-2022-28805"/>
      <reference href="https://bugzilla.redhat.com/2073884" id="2073884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2582.html" id="ALSA-2023:2582" type="self" title="ALSA-2023:2582"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="lua-libs" version="5.4.4" release="3.el9" epoch="0" arch="i686" src="lua-5.4.4-3.el9.src.rpm">
          <filename>lua-libs-5.4.4-3.el9.i686.rpm</filename>
          <sum type="sha256">e6d1cbb5f862fd2fe497dd28a3e6f409967ed33f90c7ca6d5f776519e292c2fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2650</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 21:46:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: FTP too eager connection reuse (CVE-2023-27535)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2650" id="RHSA-2023:2650" type="rhsa" title="RHSA-2023:2650"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27535" id="CVE-2023-27535" type="cve" title="CVE-2023-27535"/>
      <reference href="https://bugzilla.redhat.com/2179073" id="2179073" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2650.html" id="ALSA-2023:2650" type="self" title="ALSA-2023:2650"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libcurl" version="7.76.1" release="23.el9_2.1" epoch="0" arch="i686" src="curl-7.76.1-23.el9_2.1.src.rpm">
          <filename>libcurl-7.76.1-23.el9_2.1.i686.rpm</filename>
          <sum type="sha256">9ee72068dc49fe1cca008d37fb720312e00b340029ad82d93d403fc0d57c6ceb</sum>
        </package>
        <package name="libcurl-minimal" version="7.76.1" release="23.el9_2.1" epoch="0" arch="i686" src="curl-7.76.1-23.el9_2.1.src.rpm">
          <filename>libcurl-minimal-7.76.1-23.el9_2.1.i686.rpm</filename>
          <sum type="sha256">f3224b29225bc3187b56bcfb063d718428a7b8a535fac18d38672c354faae2c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3559</id>
    <title>Important: c-ares security update</title>
    <issued date="2023-06-13 00:00:00"/>
    <updated date="2023-06-14 07:21:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>c-ares security update</summary>
    <description>The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3559" id="RHSA-2023:3559" type="rhsa" title="RHSA-2023:3559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32067" id="CVE-2023-32067" type="cve" title="CVE-2023-32067"/>
      <reference href="https://bugzilla.redhat.com/2209502" id="2209502" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3559.html" id="ALSA-2023:3559" type="self" title="ALSA-2023:3559"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="c-ares" version="1.17.1" release="5.el9_2.1" epoch="0" arch="i686" src="c-ares-1.17.1-5.el9_2.1.src.rpm">
          <filename>c-ares-1.17.1-5.el9_2.1.i686.rpm</filename>
          <sum type="sha256">dd2a5ed88241107de98a15831193ee5aeb4a5ccaf7238898dc1b1bba9de88a30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3595</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:37:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3595" id="RHSA-2023:3595" type="rhsa" title="RHSA-2023:3595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3595.html" id="ALSA-2023:3595" type="self" title="ALSA-2023:3595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="python3-libs" version="3.9.16" release="1.el9_2.1" epoch="0" arch="i686" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-libs-3.9.16-1.el9_2.1.i686.rpm</filename>
          <sum type="sha256">75b6ef4c9c2b3a28a7f168c6410d8c56380cef59c841d36759546a531522322d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3722</id>
    <title>Moderate: openssl security and bug fix update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 14:32:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)
* openssl: Denial of service by excessive resource usage in verifying X509 policy constraints (CVE-2023-0464)
* openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465)
* openssl: Certificate policy check not enabled (CVE-2023-0466)
* openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860)
* In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864)
* In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally (BZ#2175868)
* openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c (BZ#2175873)
* In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator (BZ#2178029)
* In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator (BZ#2178030)
* In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034)
* In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039)
* In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 (BZ#2178137)
* Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046)
* OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052)
* AlmaLinux9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL (openssl) (BZ#2211396)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3722" id="RHSA-2023:3722" type="rhsa" title="RHSA-2023:3722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0464" id="CVE-2023-0464" type="cve" title="CVE-2023-0464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0465" id="CVE-2023-0465" type="cve" title="CVE-2023-0465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0466" id="CVE-2023-0466" type="cve" title="CVE-2023-0466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1255" id="CVE-2023-1255" type="cve" title="CVE-2023-1255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2650" id="CVE-2023-2650" type="cve" title="CVE-2023-2650"/>
      <reference href="https://bugzilla.redhat.com/2181082" id="2181082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182561" id="2182561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182565" id="2182565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188461" id="2188461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207947" id="2207947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3722.html" id="ALSA-2023:3722" type="self" title="ALSA-2023:3722"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="openssl-libs" version="3.0.7" release="16.el9_2" epoch="1" arch="i686" src="openssl-3.0.7-16.el9_2.src.rpm">
          <filename>openssl-libs-3.0.7-16.el9_2.i686.rpm</filename>
          <sum type="sha256">6ca7be4faa5d4ad6a6addb7d5b96aa1e1aee03fc0ee0af32e48dcc8c2e08ecbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3723</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-07-11 20:32:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)
* kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)
* Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)
* kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
* kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)
* kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel QAT Update - (kernel changes) (BZ#2176846)
* RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857)
* In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727)
* Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723)
* Azure AlmaLinux 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186822)
* AlmaLinux 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536)
* Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709)
* kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655)
* fix page end in filemap_get_read_batch (BZ#2189349)
* AlmaLinux 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348)
* wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585)
* ice: high CPU usage with GNSS or ptp4l (BZ#2203154)
* AlmaLinux 9 "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2203178)
* Dying percpu kworkers cause issues on isolated CPUs [almalinux-9] (BZ#2203229)
* FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335)
* perf errors - "event syntax error: 'unc_p_delayed_c_state_abort_core5'" b'_ value too big for format, maximum is 255' (BZ#2207471)
* AlmaLinux 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208242)
* cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong unlock before return from cifs_tree_connect (BZ#2209045)
* AlmaLinux 9 x86_64, kdump 2nd kernel will randomly panic on "kvm-08-guest25.hv2" (BZ#2210614)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3723" id="RHSA-2023:3723" type="rhsa" title="RHSA-2023:3723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2002" id="CVE-2023-2002" type="cve" title="CVE-2023-2002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2124" id="CVE-2023-2124" type="cve" title="CVE-2023-2124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2194" id="CVE-2023-2194" type="cve" title="CVE-2023-2194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2235" id="CVE-2023-2235" type="cve" title="CVE-2023-2235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28466" id="CVE-2023-28466" type="cve" title="CVE-2023-28466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32233" id="CVE-2023-32233" type="cve" title="CVE-2023-32233"/>
      <reference href="https://bugzilla.redhat.com/2179000" id="2179000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187308" id="2187308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187439" id="2187439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188396" id="2188396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192589" id="2192589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196105" id="2196105" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3723.html" id="ALSA-2023:3723" type="self" title="ALSA-2023:3723"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="noarch" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-284.18.1.el9_2.noarch.rpm</filename>
          <sum type="sha256">ad3bb578c39d312aca97379fd8a77c0c72fb9b889307f546a28ba78dd8270711</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4325</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 11:47:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223600)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4325" id="RHSA-2023:4325" type="rhsa" title="RHSA-2023:4325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4325.html" id="ALSA-2023:4325" type="self" title="ALSA-2023:4325"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libnetapi" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libnetapi-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">4b0e9fc333661fe8dcd5114cd668e8cc56994a8adbb42c19fb8641cce93035b5</sum>
        </package>
        <package name="samba-dc-libs" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-dc-libs-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">5eef04bfaa03c912654c1dcb68293182ce1518b4638b710ed56fa89d1ec317cc</sum>
        </package>
        <package name="libsmbclient" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libsmbclient-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">7ec32bd0535431b24d7915a8544f818a73f296d555725021a9bcd5090cecc41f</sum>
        </package>
        <package name="samba-client-libs" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-client-libs-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">b32274defeff6ab89002d0d1461088433d06d101575cb9a207b878a481325ecc</sum>
        </package>
        <package name="samba-common-libs" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-common-libs-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">c837b28110181f9f3a5bef72b1d4f322e0cba9c6fdc71ad3c195edc3f6e38476</sum>
        </package>
        <package name="samba-libs" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-libs-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">d0eedf6f2e8e6c582fd6cc04f35bf3d37c6ef9463b6dac87e2db983b04b677bc</sum>
        </package>
        <package name="libwbclient" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libwbclient-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">d6e1658fbcffeab5bc27a2c27672784ce854a2a9b79b638a8f970247f6d0202a</sum>
        </package>
        <package name="samba-common" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="noarch" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-common-4.17.5-103.el9_2.alma.noarch.rpm</filename>
          <sum type="sha256">e9ee2360b0d4f946ea0a99d00263d6796074b321cc3dbaf1e9b0a1c49589a67c</sum>
        </package>
        <package name="samba-winbind-modules" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-winbind-modules-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">ebc2698e52c50d273afa1acfd05bd54f659e1996a20b32eee8c7d212c1eda60e</sum>
        </package>
        <package name="python3-samba" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="i686" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>python3-samba-4.17.5-103.el9_2.alma.i686.rpm</filename>
          <sum type="sha256">eccc260cc66ffda1da22a7eacc24dfed40838d1d5024ce5b4c1c2fa7cdc3c97f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4347</id>
    <title>Moderate: libeconf security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 13:47:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libeconf security update</summary>
    <description>Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it.

Security Fix(es):

* libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4347" id="RHSA-2023:4347" type="rhsa" title="RHSA-2023:4347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22652" id="CVE-2023-22652" type="cve" title="CVE-2023-22652"/>
      <reference href="https://bugzilla.redhat.com/2212463" id="2212463" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4347.html" id="ALSA-2023:4347" type="self" title="ALSA-2023:4347"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libeconf" version="0.4.1" release="3.el9_2" epoch="0" arch="i686" src="libeconf-0.4.1-3.el9_2.src.rpm">
          <filename>libeconf-0.4.1-3.el9_2.i686.rpm</filename>
          <sum type="sha256">af528816c244d69e06d8dbab8a611e4ff1e79e8fca0c1edfc86e99d7cc2c789f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4349</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 13:24:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)
* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4349" id="RHSA-2023:4349" type="rhsa" title="RHSA-2023:4349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28484" id="CVE-2023-28484" type="cve" title="CVE-2023-28484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29469" id="CVE-2023-29469" type="cve" title="CVE-2023-29469"/>
      <reference href="https://bugzilla.redhat.com/2185984" id="2185984" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185994" id="2185994" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4349.html" id="ALSA-2023:4349" type="self" title="ALSA-2023:4349"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libxml2" version="2.9.13" release="3.el9_2.1" epoch="0" arch="i686" src="libxml2-2.9.13-3.el9_2.1.src.rpm">
          <filename>libxml2-2.9.13-3.el9_2.1.i686.rpm</filename>
          <sum type="sha256">21a82d021575c08bbaf9d7df5bb2a703b45e68f889976219c39db082ca3347ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4350</id>
    <title>Moderate: python-requests security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 13:06:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-requests security update</summary>
    <description>The python-requests package contains a library designed to make HTTP requests easy for developers.

Security Fix(es):

* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4350" id="RHSA-2023:4350" type="rhsa" title="RHSA-2023:4350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4350.html" id="ALSA-2023:4350" type="self" title="ALSA-2023:4350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="python3-requests" version="2.25.1" release="7.el9_2" epoch="0" arch="noarch" src="python-requests-2.25.1-7.el9_2.src.rpm">
          <filename>python3-requests-2.25.1-7.el9_2.noarch.rpm</filename>
          <sum type="sha256">7d4abc1a22686841b611f98116226e9a6904ab6e532f56bdff9783aac8e88444</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4354</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 12:34:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)
* curl: more POST-after-PUT confusion (CVE-2023-28322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4354" id="RHSA-2023:4354" type="rhsa" title="RHSA-2023:4354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28321" id="CVE-2023-28321" type="cve" title="CVE-2023-28321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28322" id="CVE-2023-28322" type="cve" title="CVE-2023-28322"/>
      <reference href="https://bugzilla.redhat.com/2196786" id="2196786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196793" id="2196793" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4354.html" id="ALSA-2023:4354" type="self" title="ALSA-2023:4354"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="23.el9_2.2" epoch="0" arch="i686" src="curl-7.76.1-23.el9_2.2.src.rpm">
          <filename>libcurl-minimal-7.76.1-23.el9_2.2.i686.rpm</filename>
          <sum type="sha256">4d1956602a4dffbcbb148497580ce3bcbc4432e21c374d32197945fe29eba48d</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="23.el9_2.2" epoch="0" arch="i686" src="curl-7.76.1-23.el9_2.2.src.rpm">
          <filename>libcurl-7.76.1-23.el9_2.2.i686.rpm</filename>
          <sum type="sha256">6ba6b0a65d3f4eb634ea6aa9948e7e39edee1db68dbada3c99ebfe6e6f9ac794</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4377</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-08 13:12:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: out-of-bounds write caused by unclear skb-&gt;cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4377" id="RHSA-2023:4377" type="rhsa" title="RHSA-2023:4377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45869" id="CVE-2022-45869" type="cve" title="CVE-2022-45869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0458" id="CVE-2023-0458" type="cve" title="CVE-2023-0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1998" id="CVE-2023-1998" type="cve" title="CVE-2023-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3090" id="CVE-2023-3090" type="cve" title="CVE-2023-3090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35788" id="CVE-2023-35788" type="cve" title="CVE-2023-35788"/>
      <reference href="https://bugzilla.redhat.com/2151317" id="2151317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187257" id="2187257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193219" id="2193219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215768" id="2215768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218672" id="2218672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4377.html" id="ALSA-2023:4377" type="self" title="ALSA-2023:4377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="noarch" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-284.25.1.el9_2.noarch.rpm</filename>
          <sum type="sha256">fcde8c45e5c41f8df04235365e5aca7299433288e2829727fd0ab02349a65738</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4569</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 11:31:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4569" id="RHSA-2023:4569" type="rhsa" title="RHSA-2023:4569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34969" id="CVE-2023-34969" type="cve" title="CVE-2023-34969"/>
      <reference href="https://bugzilla.redhat.com/2213166" id="2213166" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4569.html" id="ALSA-2023:4569" type="self" title="ALSA-2023:4569"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="dbus-common" version="1.12.20" release="7.el9_2.1" epoch="1" arch="noarch" src="dbus-1.12.20-7.el9_2.1.src.rpm">
          <filename>dbus-common-1.12.20-7.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">9082c08d39a40f15d618e0132eb7bd406e9f53e6e9cb4933607563e1479e5115</sum>
        </package>
        <package name="dbus-libs" version="1.12.20" release="7.el9_2.1" epoch="1" arch="i686" src="dbus-1.12.20-7.el9_2.1.src.rpm">
          <filename>dbus-libs-1.12.20-7.el9_2.1.i686.rpm</filename>
          <sum type="sha256">ff5b64cb5b62406b1cb5e2c1e7abeedce972368c0182aaef12e9833a3437cdef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4838</id>
    <title>Important: cups security update</title>
    <issued date="2023-08-29 00:00:00"/>
    <updated date="2023-08-30 09:39:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Information leak through Cups-Get-Document operation (CVE-2023-32360)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4838" id="RHSA-2023:4838" type="rhsa" title="RHSA-2023:4838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32360" id="CVE-2023-32360" type="cve" title="CVE-2023-32360"/>
      <reference href="https://bugzilla.redhat.com/2230495" id="2230495" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4838.html" id="ALSA-2023:4838" type="self" title="ALSA-2023:4838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="cups-libs" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="i686" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-libs-2.3.3op2-16.el9_2.1.i686.rpm</filename>
          <sum type="sha256">9e115b840dceebb8c9ade4b362e3119896fd2c0216082398838b990e1116b970</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5068</id>
    <title>Moderate: linux-firmware security update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-10-05 13:12:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>linux-firmware security update</summary>
    <description>The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* hw: amd: Cross-Process Information Leak (CVE-2023-20593)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5068" id="RHSA-2023:5068" type="rhsa" title="RHSA-2023:5068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20593" id="CVE-2023-20593" type="cve" title="CVE-2023-20593"/>
      <reference href="https://bugzilla.redhat.com/2217845" id="2217845" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5068.html" id="ALSA-2023:5068" type="self" title="ALSA-2023:5068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="iwl3160-firmware" version="25.30.13.0" release="135.el9_2.alma.1" epoch="1" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">065b80746e02fbd5f83c9ade43bf0e9cb5b156a933a0a40b5e1f4ed6e521884f</sum>
        </package>
        <package name="iwl6000g2b-firmware" version="18.168.6.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">11b41ae5d262edece0f81293f6ab29694003ed65736e26fc25c3dce642065977</sum>
        </package>
        <package name="iwl5000-firmware" version="8.83.5.1_1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">12fb1763990595c75c84f9910393fcc7631e7e0161f7e1bde78098ebeb56e22c</sum>
        </package>
        <package name="iwl5150-firmware" version="8.24.2.2" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">2b37867a52ee959abc12f23c144cb22a55be6dfa768ba14554f21ebb1698bfdd</sum>
        </package>
        <package name="iwl2000-firmware" version="18.168.6.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">2bde52e663ec2d78624b0cc54f4220b7feb851432949d92a992246be782c8a3a</sum>
        </package>
        <package name="netronome-firmware" version="20230310" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>netronome-firmware-20230310-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">2cb2d628f0a04f75b13333a0487067550ebfa555fa95b0e998f7359f02ac0daa</sum>
        </package>
        <package name="iwl6000g2a-firmware" version="18.168.6.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">370e2ad54b4e1c063027947a1b37582f506b8e0a404fb0131de1c1ddd1bcdaad</sum>
        </package>
        <package name="iwl105-firmware" version="18.168.6.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl105-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">3ae897077f984eb18dc3f6a2d6168f371d3dd71276c76569109e585a369a3dbd</sum>
        </package>
        <package name="iwl135-firmware" version="18.168.6.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl135-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">3e8ccea6ac010106d0aa07f7bd5dfd8fdd961b4f3c725621f99fddeb1c53b70a</sum>
        </package>
        <package name="iwl100-firmware" version="39.31.5.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl100-firmware-39.31.5.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">844cd1f8389ae7c9453f5fab38b7b2728410389fa4ad1a149aaa815c579853cd</sum>
        </package>
        <package name="iwl2030-firmware" version="18.168.6.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">8d885fcccb043a27c4d955583c0114b3ea57e54f49e38ab17a39f8f3787eb1f8</sum>
        </package>
        <package name="linux-firmware-whence" version="20230310" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>linux-firmware-whence-20230310-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">a21c9a82aa74a2ffbaf9e370806681c04fa835e459795fd4459da55fcfef1085</sum>
        </package>
        <package name="iwl7260-firmware" version="25.30.13.0" release="135.el9_2.alma.1" epoch="1" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">c80c088c212c2d35c5dcabfc1d77f73828626861a70de3fb48103f28b0b961f3</sum>
        </package>
        <package name="iwl1000-firmware" version="39.31.5.1" release="135.el9_2.alma.1" epoch="1" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">dcd7a0d844fc87c8ca7f14e21ce3b74431d8451cb3b8d61649c042619f5357e0</sum>
        </package>
        <package name="libertas-sd8787-firmware" version="20230310" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>libertas-sd8787-firmware-20230310-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">e2b4b492eee27c5a9475444104d91cc83206414d76505ae345f1b0a31e4ce9b3</sum>
        </package>
        <package name="linux-firmware" version="20230310" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>linux-firmware-20230310-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">e59f5edb474769099bac7e3269645ada3e6e82d75760834b98eae95c8166bd51</sum>
        </package>
        <package name="iwl6050-firmware" version="41.28.5.1" release="135.el9_2.alma.1" epoch="0" arch="noarch" src="linux-firmware-20230310-135.el9_2.alma.1.src.rpm">
          <filename>iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">f024df7f26ab8d33236ac0720771b24242a94ebc6ba53387a92b1d0d7bfa5bab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5069</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 08:08:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (5.14.0).

Security Fix(es):

* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)
* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)
* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)
* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)
* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)
* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)
* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)
* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)
* hw: amd: Cross-Process Information Leak (CVE-2023-20593)
* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026)
* [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463)
* rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121)
* AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310)
* AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587)
* Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623)
* bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945)
* libceph: harden msgr2.1 frame segment length checks (BZ#2227070)
* Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768)
* Important iavf bug fixes July 2023 (BZ#2228156)
* [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158)
* lvconvert --splitcache, --uncache operations getting hung (BZ#2228481)
* perf: EMR core and uncore PMU support (BZ#2230175)
* NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483)
* NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488)
* [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747)
* Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850)
* [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status  SRB_STATUS_INTERNAL_ERROR  (0x30) (BZ#2231990)
* AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213)
* NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302)
* [Lenovo 9.1 bug]   AlmaLinux 9 will hang when "echo c &gt; /proc/sysrq-trigger". (BZ#2232700)
* [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64  (/proc/[pid]/wchan broken) (BZ#2233928)

Enhancement(s):

* [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270)
* [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960)
* [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170)
* [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5069" id="RHSA-2023:5069" type="rhsa" title="RHSA-2023:5069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1637" id="CVE-2023-1637" type="cve" title="CVE-2023-1637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20593" id="CVE-2023-20593" type="cve" title="CVE-2023-20593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21102" id="CVE-2023-21102" type="cve" title="CVE-2023-21102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31248" id="CVE-2023-31248" type="cve" title="CVE-2023-31248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3390" id="CVE-2023-3390" type="cve" title="CVE-2023-3390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35001" id="CVE-2023-35001" type="cve" title="CVE-2023-35001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3610" id="CVE-2023-3610" type="cve" title="CVE-2023-3610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3776" id="CVE-2023-3776" type="cve" title="CVE-2023-3776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4004" id="CVE-2023-4004" type="cve" title="CVE-2023-4004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4147" id="CVE-2023-4147" type="cve" title="CVE-2023-4147"/>
      <reference href="https://bugzilla.redhat.com/2181891" id="2181891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213260" id="2213260" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213455" id="2213455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217845" id="2217845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220892" id="2220892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220893" id="2220893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225097" id="2225097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225198" id="2225198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225239" id="2225239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225275" id="2225275" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5069.html" id="ALSA-2023:5069" type="self" title="ALSA-2023:5069"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="noarch" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-284.30.1.el9_2.noarch.rpm</filename>
          <sum type="sha256">da143ed2fa92a56dad1027486191beea0d5d73f937d96894a024ad2a7e24c175</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5071</id>
    <title>Moderate: libcap security update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 09:25:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libcap security update</summary>
    <description>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.

Security Fix(es):

* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)
* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5071" id="RHSA-2023:5071" type="rhsa" title="RHSA-2023:5071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2602" id="CVE-2023-2602" type="cve" title="CVE-2023-2602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2603" id="CVE-2023-2603" type="cve" title="CVE-2023-2603"/>
      <reference href="https://bugzilla.redhat.com/2209113" id="2209113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209114" id="2209114" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5071.html" id="ALSA-2023:5071" type="self" title="ALSA-2023:5071"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libcap" version="2.48" release="9.el9_2" epoch="0" arch="i686" src="libcap-2.48-9.el9_2.src.rpm">
          <filename>libcap-2.48-9.el9_2.i686.rpm</filename>
          <sum type="sha256">0352b4ff0054c15d5c575cce5fcb5838379f25565f346224e7c664b1e2fbed16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5453</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:28:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5453" id="RHSA-2023:5453" type="rhsa" title="RHSA-2023:5453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5453.html" id="ALSA-2023:5453" type="self" title="ALSA-2023:5453"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="glibc-gconv-extra" version="2.34" release="60.el9_2.7" epoch="0" arch="i686" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-gconv-extra-2.34-60.el9_2.7.i686.rpm</filename>
          <sum type="sha256">258fa4203fe760b91740f8dcdd9b3f96daad502feced85914b4d8e85ab052399</sum>
        </package>
        <package name="libnsl" version="2.34" release="60.el9_2.7" epoch="0" arch="i686" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>libnsl-2.34-60.el9_2.7.i686.rpm</filename>
          <sum type="sha256">acc6793b44e483e8e0c431c62d40f564e9bf637120c6f0885b33c7c0f2ded0ec</sum>
        </package>
        <package name="glibc" version="2.34" release="60.el9_2.7" epoch="0" arch="i686" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-2.34-60.el9_2.7.i686.rpm</filename>
          <sum type="sha256">c695e5a17e63504ce152eec4f4fc5da1e9794f0891fca15b2a7766648b260a78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5462</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:34:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5462" id="RHSA-2023:5462" type="rhsa" title="RHSA-2023:5462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5462.html" id="ALSA-2023:5462" type="self" title="ALSA-2023:5462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="python3-libs" version="3.9.16" release="1.el9_2.2" epoch="0" arch="i686" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-libs-3.9.16-1.el9_2.2.i686.rpm</filename>
          <sum type="sha256">f4bfe81326c777e4929f68ffc896b5d33256e5aece10dc44863ffb6c8402b5bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5763</id>
    <title>Important: curl security update</title>
    <issued date="2023-10-17 00:00:00"/>
    <updated date="2023-10-17 14:51:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545)
* curl: cookie injection with none file (CVE-2023-38546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5763" id="RHSA-2023:5763" type="rhsa" title="RHSA-2023:5763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38545" id="CVE-2023-38545" type="cve" title="CVE-2023-38545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38546" id="CVE-2023-38546" type="cve" title="CVE-2023-38546"/>
      <reference href="https://bugzilla.redhat.com/2241933" id="2241933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241938" id="2241938" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5763.html" id="ALSA-2023:5763" type="self" title="ALSA-2023:5763"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="23.el9_2.4" epoch="0" arch="i686" src="curl-7.76.1-23.el9_2.4.src.rpm">
          <filename>libcurl-minimal-7.76.1-23.el9_2.4.i686.rpm</filename>
          <sum type="sha256">53434c015ec64662f83ec351d7022d0ea5fdd13631daa37915574a11e132e90d</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="23.el9_2.4" epoch="0" arch="i686" src="curl-7.76.1-23.el9_2.4.src.rpm">
          <filename>libcurl-7.76.1-23.el9_2.4.i686.rpm</filename>
          <sum type="sha256">eabec071b8be81998f1747f138ee3be637c8482eb202367d9a36cd6cf1b470ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5838</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 06:29:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5838" id="RHSA-2023:5838" type="rhsa" title="RHSA-2023:5838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5838.html" id="ALSA-2023:5838" type="self" title="ALSA-2023:5838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libnghttp2" version="1.43.0" release="5.el9_2.1" epoch="0" arch="i686" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>libnghttp2-1.43.0-5.el9_2.1.i686.rpm</filename>
          <sum type="sha256">a8f829041cfe9ff31216adb614b2a67edb759fbc9139b8d3c779669622957d2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6587</id>
    <title>Low: opensc security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>opensc security update</summary>
    <description>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.

Security Fix(es):

* opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package (CVE-2023-2977)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6587" id="RHSA-2023:6587" type="rhsa" title="RHSA-2023:6587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2977" id="CVE-2023-2977" type="cve" title="CVE-2023-2977"/>
      <reference href="https://bugzilla.redhat.com/2211088" id="2211088" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6587.html" id="ALSA-2023:6587" type="self" title="ALSA-2023:6587"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="opensc" version="0.23.0" release="2.el9" epoch="0" arch="i686" src="opensc-0.23.0-2.el9.src.rpm">
          <filename>opensc-0.23.0-2.el9.i686.rpm</filename>
          <sum type="sha256">2b82b1bf2fb1dba862c846540f12c61d28706e4d58731178ef9890eda2136c72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6593</id>
    <title>Moderate: binutils security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6593" id="RHSA-2023:6593" type="rhsa" title="RHSA-2023:6593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4285" id="CVE-2022-4285" type="cve" title="CVE-2022-4285"/>
      <reference href="https://bugzilla.redhat.com/2150768" id="2150768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6593.html" id="ALSA-2023:6593" type="self" title="ALSA-2023:6593"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="binutils" version="2.35.2" release="42.el9" epoch="0" arch="i686" src="binutils-2.35.2-42.el9.src.rpm">
          <filename>binutils-2.35.2-42.el9.i686.rpm</filename>
          <sum type="sha256">7dc267a4c33ec06824101b19410985640f78db39a55fe5e2433a1670f210759f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6595</id>
    <title>Important: linux-firmware security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:15:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>linux-firmware security, bug fix, and enhancement update</summary>
    <description>The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635)
* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964)
* hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329)
* hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351)
* hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)
* hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6595" id="RHSA-2023:6595" type="rhsa" title="RHSA-2023:6595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27635" id="CVE-2022-27635" type="cve" title="CVE-2022-27635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36351" id="CVE-2022-36351" type="cve" title="CVE-2022-36351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38076" id="CVE-2022-38076" type="cve" title="CVE-2022-38076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40964" id="CVE-2022-40964" type="cve" title="CVE-2022-40964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46329" id="CVE-2022-46329" type="cve" title="CVE-2022-46329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20569" id="CVE-2023-20569" type="cve" title="CVE-2023-20569"/>
      <reference href="https://bugzilla.redhat.com/2207625" id="2207625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238960" id="2238960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238961" id="2238961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238962" id="2238962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238963" id="2238963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238964" id="2238964" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6595.html" id="ALSA-2023:6595" type="self" title="ALSA-2023:6595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="iwl135-firmware" version="18.168.6.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl135-firmware-18.168.6.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">090fbfb06a6bae7df71552e010a9f03acba8ef2926862c3d4d3a59a6b62d1f6e</sum>
        </package>
        <package name="linux-firmware" version="20230814" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>linux-firmware-20230814-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">0e3c052d81f6d8795ff3d7cbaf21cfaf66ab4dc49d412367d0cc3b9a4dafa3b6</sum>
        </package>
        <package name="netronome-firmware" version="20230814" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>netronome-firmware-20230814-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">1667428769e83438b914f3cca91e9ebad99afe060921a2dcd80b51e290fdc147</sum>
        </package>
        <package name="iwl1000-firmware" version="39.31.5.1" release="140.el9_3" epoch="1" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl1000-firmware-39.31.5.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">235076ae6fb17b7d3b7b7000a6bc0105791e592b7629c30d5f5ad8818ccd2c2b</sum>
        </package>
        <package name="linux-firmware-whence" version="20230814" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>linux-firmware-whence-20230814-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">2b61b347e30c54a9bab26212dbc5aaa34ad17daa87ecd4822334a2e3aa3a9ba9</sum>
        </package>
        <package name="iwl2030-firmware" version="18.168.6.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl2030-firmware-18.168.6.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">3ea9328906f85f1a88af51c2f7dde195404783ea66264325170e53505750d10f</sum>
        </package>
        <package name="iwl5000-firmware" version="8.83.5.1_1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl5000-firmware-8.83.5.1_1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">5c7d4ab3c8a592937a406db3d3bb8f50ef4d0be09548cb9e0c598155fcc4fa25</sum>
        </package>
        <package name="iwl105-firmware" version="18.168.6.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl105-firmware-18.168.6.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">846626141a456736e140a25937b9ec97973909e9c06e87cb109ed3282271c25a</sum>
        </package>
        <package name="iwl100-firmware" version="39.31.5.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl100-firmware-39.31.5.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">8babc2e0da5c22b48ebd93adcf775d132d8a8c2ba12b81655dcda5f36b40a9ae</sum>
        </package>
        <package name="iwl3160-firmware" version="25.30.13.0" release="140.el9_3" epoch="1" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl3160-firmware-25.30.13.0-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">8bfa807e92ca51ac96da651c3a99582bd15a5530069d9e53be86f1c7b5fcd674</sum>
        </package>
        <package name="iwl6000g2a-firmware" version="18.168.6.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl6000g2a-firmware-18.168.6.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">985b9782667f24bda9bdbae837ab4a213884b02deda6592fb70f73b6237ebbdc</sum>
        </package>
        <package name="iwl6000g2b-firmware" version="18.168.6.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl6000g2b-firmware-18.168.6.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">98f1a0e271ca9b9c0f14aaea911fcc37d9acb03b5db0fccab43a2f29ce5c3ca1</sum>
        </package>
        <package name="iwl2000-firmware" version="18.168.6.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl2000-firmware-18.168.6.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">af3fde35d92d71b65e7d08803a1cae114e1d0de3886cef65d77652576676046c</sum>
        </package>
        <package name="libertas-sd8787-firmware" version="20230814" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>libertas-sd8787-firmware-20230814-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">dc60cdb5f3aef20b29dbb71873a1992d7c3dd09bd5bc7d517054e7f2834cde2b</sum>
        </package>
        <package name="iwl6050-firmware" version="41.28.5.1" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl6050-firmware-41.28.5.1-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">e67b5942d4c7c3b2d97d8d475f1155eb0f162cb7ddc50b65c545ed81b325c9d8</sum>
        </package>
        <package name="iwl7260-firmware" version="25.30.13.0" release="140.el9_3" epoch="1" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl7260-firmware-25.30.13.0-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">ed99d40ec0dd22f2c576f97cadc183638b8081ec7932e782d814e640bc1a328f</sum>
        </package>
        <package name="iwl5150-firmware" version="8.24.2.2" release="140.el9_3" epoch="0" arch="noarch" src="linux-firmware-20230814-140.el9_3.src.rpm">
          <filename>iwl5150-firmware-8.24.2.2-140.el9_3.noarch.rpm</filename>
          <sum type="sha256">f594b76cfd0d286a7f16d386c4d2e2013653ccc49ec637fa2b96b2dc560547b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6596</id>
    <title>Moderate: cups security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security and bug fix update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: heap buffer overflow may lead to DoS (CVE-2023-32324)
* cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6596" id="RHSA-2023:6596" type="rhsa" title="RHSA-2023:6596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32324" id="CVE-2023-32324" type="cve" title="CVE-2023-32324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34241" id="CVE-2023-34241" type="cve" title="CVE-2023-34241"/>
      <reference href="https://bugzilla.redhat.com/2209603" id="2209603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2214914" id="2214914" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6596.html" id="ALSA-2023:6596" type="self" title="ALSA-2023:6596"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="cups-libs" version="2.3.3op2" release="21.el9" epoch="1" arch="i686" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-libs-2.3.3op2-21.el9.i686.rpm</filename>
          <sum type="sha256">da9da56803b5350afbd911e7f6664c73ebecb3a84753904b2158c0a7d42b8aad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6621</id>
    <title>Moderate: protobuf-c security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf-c security update</summary>
    <description>The protobuf-c packages provide C bindings for Google's Protocol Buffers.

Security Fix(es):

* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6621" id="RHSA-2023:6621" type="rhsa" title="RHSA-2023:6621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48468" id="CVE-2022-48468" type="cve" title="CVE-2022-48468"/>
      <reference href="https://bugzilla.redhat.com/2186673" id="2186673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6621.html" id="ALSA-2023:6621" type="self" title="ALSA-2023:6621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="protobuf-c" version="1.3.3" release="13.el9" epoch="0" arch="i686" src="protobuf-c-1.3.3-13.el9.src.rpm">
          <filename>protobuf-c-1.3.3-13.el9.i686.rpm</filename>
          <sum type="sha256">c020ed014211395b5771d6e1d5209ede9de2147aa4a209f644b16fab0dec5cea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6631</id>
    <title>Low: glib2 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>glib2 security and bug fix update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499)
* glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611)
* glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6631" id="RHSA-2023:6631" type="rhsa" title="RHSA-2023:6631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29499" id="CVE-2023-29499" type="cve" title="CVE-2023-29499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32611" id="CVE-2023-32611" type="cve" title="CVE-2023-32611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32665" id="CVE-2023-32665" type="cve" title="CVE-2023-32665"/>
      <reference href="https://bugzilla.redhat.com/2211827" id="2211827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211828" id="2211828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211829" id="2211829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6631.html" id="ALSA-2023:6631" type="self" title="ALSA-2023:6631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="glib2" version="2.68.4" release="11.el9" epoch="0" arch="i686" src="glib2-2.68.4-11.el9.src.rpm">
          <filename>glib2-2.68.4-11.el9.i686.rpm</filename>
          <sum type="sha256">8febaf749452cfae551010e44d7e6bac1246c70f2d8cc4e90f38998c85766fa9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6632</id>
    <title>Low: shadow-utils security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security and bug fix update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. 

Security Fix(es):

* shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6632" id="RHSA-2023:6632" type="rhsa" title="RHSA-2023:6632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4641" id="CVE-2023-4641" type="cve" title="CVE-2023-4641"/>
      <reference href="https://bugzilla.redhat.com/2215945" id="2215945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6632.html" id="ALSA-2023:6632" type="self" title="ALSA-2023:6632"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="shadow-utils-subid" version="4.9" release="8.el9" epoch="2" arch="i686" src="shadow-utils-4.9-8.el9.src.rpm">
          <filename>shadow-utils-subid-4.9-8.el9.i686.rpm</filename>
          <sum type="sha256">78870bbcb3a17f520415889ed2e2874f9ec4e479b2a87b957ce7d672d3c07b49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6635</id>
    <title>Moderate: c-ares security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>c-ares security, bug fix, and enhancement update</summary>
    <description>The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370)

Security Fix(es):

* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6635" id="RHSA-2023:6635" type="rhsa" title="RHSA-2023:6635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31124" id="CVE-2023-31124" type="cve" title="CVE-2023-31124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31130" id="CVE-2023-31130" type="cve" title="CVE-2023-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31147" id="CVE-2023-31147" type="cve" title="CVE-2023-31147"/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209494" id="2209494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209497" id="2209497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209501" id="2209501" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6635.html" id="ALSA-2023:6635" type="self" title="ALSA-2023:6635"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="c-ares" version="1.19.1" release="1.el9" epoch="0" arch="i686" src="c-ares-1.19.1-1.el9.src.rpm">
          <filename>c-ares-1.19.1-1.el9.i686.rpm</filename>
          <sum type="sha256">785f7387bddb895ee64e093f8beb579f6cc99440ac9f8e1eaa7ab2a273ce9d51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6643</id>
    <title>Moderate: libssh security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
* libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6643" id="RHSA-2023:6643" type="rhsa" title="RHSA-2023:6643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1667" id="CVE-2023-1667" type="cve" title="CVE-2023-1667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2283" id="CVE-2023-2283" type="cve" title="CVE-2023-2283"/>
      <reference href="https://bugzilla.redhat.com/2182199" id="2182199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2189736" id="2189736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6643.html" id="ALSA-2023:6643" type="self" title="ALSA-2023:6643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libssh" version="0.10.4" release="11.el9" epoch="0" arch="i686" src="libssh-0.10.4-11.el9.src.rpm">
          <filename>libssh-0.10.4-11.el9.i686.rpm</filename>
          <sum type="sha256">33c24793c18f0d437952f18203d1288e73775a8122ef8aa29aade08fd9cd2720</sum>
        </package>
        <package name="libssh-config" version="0.10.4" release="11.el9" epoch="0" arch="noarch" src="libssh-0.10.4-11.el9.src.rpm">
          <filename>libssh-config-0.10.4-11.el9.noarch.rpm</filename>
          <sum type="sha256">af58c892b03758b07d0fa31a25a95e98bfb76307b8130808fb14f239c2da9891</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6659</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6659" id="RHSA-2023:6659" type="rhsa" title="RHSA-2023:6659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6659.html" id="ALSA-2023:6659" type="self" title="ALSA-2023:6659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="python3-libs" version="3.9.18" release="1.el9_3" epoch="0" arch="i686" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-libs-3.9.18-1.el9_3.i686.rpm</filename>
          <sum type="sha256">54fc8c48bd9c81931a8e73bd00ea3603c0c8b1ab5dc4e9d27f4f3da9ad99e2cb</sum>
        </package>
        <package name="python3" version="3.9.18" release="1.el9_3" epoch="0" arch="i686" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-3.9.18-1.el9_3.i686.rpm</filename>
          <sum type="sha256">73c6189d1116033628b326ef567eaacae932c0542b49482b2e68a1d8ae0c04b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6661</id>
    <title>Low: gmp security and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>gmp security and enhancement update</summary>
    <description>The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. 

Security Fix(es):

* gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6661" id="RHSA-2023:6661" type="rhsa" title="RHSA-2023:6661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43618" id="CVE-2021-43618" type="cve" title="CVE-2021-43618"/>
      <reference href="https://bugzilla.redhat.com/2024904" id="2024904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6661.html" id="ALSA-2023:6661" type="self" title="ALSA-2023:6661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="gmp" version="6.2.0" release="13.el9" epoch="1" arch="i686" src="gmp-6.2.0-13.el9.src.rpm">
          <filename>gmp-6.2.0-13.el9.i686.rpm</filename>
          <sum type="sha256">fe352f7d197ebdf2c92bbd6e548f9f6b7ac9e69e7a9d6c9861a6274482e79d73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6667</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 11:44:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6667" id="RHSA-2023:6667" type="rhsa" title="RHSA-2023:6667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6667.html" id="ALSA-2023:6667" type="self" title="ALSA-2023:6667"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="samba-winbind-modules" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-winbind-modules-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">1d891fc5586c8b386d8cd6ddb4e77d828b0ae5a0f479b1b6c551a8242cfec073</sum>
        </package>
        <package name="samba-client-libs" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-client-libs-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">4980450be5a23f4f0b2327c6cd644bb17486cd6962e35ac3b00d46243e2873e7</sum>
        </package>
        <package name="samba-common-libs" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-common-libs-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">6245e7b8bdda4b6c999e08762e5cd078e1b5b9edec040b225bb23c690ac9ef24</sum>
        </package>
        <package name="libsmbclient" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libsmbclient-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">628c4c05e013d481df6ca651de8aa4f474b3d7c46b32ff1bfa627838dca74f11</sum>
        </package>
        <package name="libwbclient" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libwbclient-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">b847844a80a1651b879fd018600cc3748472ac2ab93afe61ea1db7f7de50d0ae</sum>
        </package>
        <package name="samba-libs" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-libs-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">bbce5580ad3198972866c841e379bc4c722e38390358eda39f828a6420a10dba</sum>
        </package>
        <package name="python3-samba" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>python3-samba-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">d5ecfcbe2c77742e971f3f17e74c272b8965dea0e6d27e094f1f6b90b8aac54a</sum>
        </package>
        <package name="samba-dc-libs" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-dc-libs-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">e252ea311f391100c10524bf0840a21cbd208699a1b66f0cbe7afe2c87c74476</sum>
        </package>
        <package name="libnetapi" version="4.18.6" release="100.el9" epoch="0" arch="i686" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libnetapi-4.18.6-100.el9.i686.rpm</filename>
          <sum type="sha256">ff1d43632bc46b7b26bd83f31b6504081086f4a8a890351c848bcd990d270637</sum>
        </package>
        <package name="samba-common" version="4.18.6" release="100.el9" epoch="0" arch="noarch" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-common-4.18.6-100.el9.noarch.rpm</filename>
          <sum type="sha256">ffe0bbf00230482c50e61dcdd26708dc88ad3622551978d02c1a5564b5a48729</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6679</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 11:24:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: GSS delegation too eager connection re-use (CVE-2023-27536)
* curl: TELNET option IAC injection (CVE-2023-27533)
* curl: SFTP path ~ resolving discrepancy (CVE-2023-27534)
* curl: SSH connection too eager reuse still (CVE-2023-27538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6679" id="RHSA-2023:6679" type="rhsa" title="RHSA-2023:6679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27533" id="CVE-2023-27533" type="cve" title="CVE-2023-27533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27534" id="CVE-2023-27534" type="cve" title="CVE-2023-27534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27536" id="CVE-2023-27536" type="cve" title="CVE-2023-27536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27538" id="CVE-2023-27538" type="cve" title="CVE-2023-27538"/>
      <reference href="https://bugzilla.redhat.com/2179062" id="2179062" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179069" id="2179069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179092" id="2179092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179103" id="2179103" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6679.html" id="ALSA-2023:6679" type="self" title="ALSA-2023:6679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="26.el9" epoch="0" arch="i686" src="curl-7.76.1-26.el9.src.rpm">
          <filename>libcurl-minimal-7.76.1-26.el9.i686.rpm</filename>
          <sum type="sha256">41b8634872da908a32d789035df80b7559b614464eb449935a521d284b299e63</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="26.el9" epoch="0" arch="i686" src="curl-7.76.1-26.el9.src.rpm">
          <filename>libcurl-7.76.1-26.el9.i686.rpm</filename>
          <sum type="sha256">89406a938fcc36719c8d4f2657211b1ecc9cd4d1d96061c0bd35450a4c3d62d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6685</id>
    <title>Low: tpm2-tss security and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>tpm2-tss security and enhancement update</summary>
    <description>The tpm2-tss packages provide the Intel implementation of the Trusted Platform Module (TPM) 2.0 System API library. This library enables programs to interact with TPM 2.0 devices

Security Fix(es):

* tpm2-tss: Buffer Overlow in TSS2_RC_Decode (CVE-2023-22745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6685" id="RHSA-2023:6685" type="rhsa" title="RHSA-2023:6685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22745" id="CVE-2023-22745" type="cve" title="CVE-2023-22745"/>
      <reference href="https://bugzilla.redhat.com/2162610" id="2162610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6685.html" id="ALSA-2023:6685" type="self" title="ALSA-2023:6685"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="tpm2-tss" version="3.2.2" release="2.el9" epoch="0" arch="i686" src="tpm2-tss-3.2.2-2.el9.src.rpm">
          <filename>tpm2-tss-3.2.2-2.el9.i686.rpm</filename>
          <sum type="sha256">4b04fdcb4ab03742ba6c76d88e767e2616042d30eed4a33a154a6070775347fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6694</id>
    <title>Moderate: python-pip security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pip security update</summary>
    <description>pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". 

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6694" id="RHSA-2023:6694" type="rhsa" title="RHSA-2023:6694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6694.html" id="ALSA-2023:6694" type="self" title="ALSA-2023:6694"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="python3-pip-wheel" version="21.2.3" release="7.el9" epoch="0" arch="noarch" src="python-pip-21.2.3-7.el9.src.rpm">
          <filename>python3-pip-wheel-21.2.3-7.el9.noarch.rpm</filename>
          <sum type="sha256">eb7518ce9a78bc7edbdf1a744aef9e9558fa53ce63a6e20dbe13bde27ff4792a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6698</id>
    <title>Moderate: ncurses security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ncurses security and bug fix update</summary>
    <description>The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.

Security Fix(es):

* ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6698" id="RHSA-2023:6698" type="rhsa" title="RHSA-2023:6698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29491" id="CVE-2023-29491" type="cve" title="CVE-2023-29491"/>
      <reference href="https://bugzilla.redhat.com/2191704" id="2191704" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6698.html" id="ALSA-2023:6698" type="self" title="ALSA-2023:6698"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="ncurses-libs" version="6.2" release="10.20210508.el9" epoch="0" arch="i686" src="ncurses-6.2-10.20210508.el9.src.rpm">
          <filename>ncurses-libs-6.2-10.20210508.el9.i686.rpm</filename>
          <sum type="sha256">285db6dc6f610f75ef6863dcb0a383eae394c2b33bff283189cb49ac7fae4c58</sum>
        </package>
        <package name="ncurses-base" version="6.2" release="10.20210508.el9" epoch="0" arch="noarch" src="ncurses-6.2-10.20210508.el9.src.rpm">
          <filename>ncurses-base-6.2-10.20210508.el9.noarch.rpm</filename>
          <sum type="sha256">d8307bfbd2428c8d08deffaff1ec61f7bc016ef03c77798b32ce021965e1bc65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6699</id>
    <title>Moderate: krb5 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:07:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security and bug fix update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)
* krb5: double-free in KDC TGS processing (CVE-2023-39975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6699" id="RHSA-2023:6699" type="rhsa" title="RHSA-2023:6699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36054" id="CVE-2023-36054" type="cve" title="CVE-2023-36054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39975" id="CVE-2023-39975" type="cve" title="CVE-2023-39975"/>
      <reference href="https://bugzilla.redhat.com/2230178" id="2230178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232682" id="2232682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6699.html" id="ALSA-2023:6699" type="self" title="ALSA-2023:6699"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="krb5-libs" version="1.21.1" release="1.el9" epoch="0" arch="i686" src="krb5-1.21.1-1.el9.src.rpm">
          <filename>krb5-libs-1.21.1-1.el9.i686.rpm</filename>
          <sum type="sha256">3812203930cd6ddb7edb21be0f36be6354692f3af6b7bc3e0d3285d6d820dc14</sum>
        </package>
        <package name="libkadm5" version="1.21.1" release="1.el9" epoch="0" arch="i686" src="krb5-1.21.1-1.el9.src.rpm">
          <filename>libkadm5-1.21.1-1.el9.i686.rpm</filename>
          <sum type="sha256">5602b7f4abd3060ab4eaaf6c57482c82e04aea2656ad667fc4f414f3dd3d174d</sum>
        </package>
        <package name="krb5-pkinit" version="1.21.1" release="1.el9" epoch="0" arch="i686" src="krb5-1.21.1-1.el9.src.rpm">
          <filename>krb5-pkinit-1.21.1-1.el9.i686.rpm</filename>
          <sum type="sha256">620ab9edac7a7f016a981ee88cb5b497d720b10535c1d1426f28be730381fe03</sum>
        </package>
        <package name="krb5-server-ldap" version="1.21.1" release="1.el9" epoch="0" arch="i686" src="krb5-1.21.1-1.el9.src.rpm">
          <filename>krb5-server-ldap-1.21.1-1.el9.i686.rpm</filename>
          <sum type="sha256">647647017c5dd40ead7619da05536ba8cdce43f9a4fde1e158b11a45217d9b23</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="1.el9" epoch="0" arch="i686" src="krb5-1.21.1-1.el9.src.rpm">
          <filename>krb5-server-1.21.1-1.el9.i686.rpm</filename>
          <sum type="sha256">923be019d24045a6f84fdef126a085a0bc7aef4970708dc236407677d48cd9e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6705</id>
    <title>Low: procps-ng security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>procps-ng security and bug fix update</summary>
    <description>The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

* procps: ps buffer overflow (CVE-2023-4016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6705" id="RHSA-2023:6705" type="rhsa" title="RHSA-2023:6705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4016" id="CVE-2023-4016" type="cve" title="CVE-2023-4016"/>
      <reference href="https://bugzilla.redhat.com/2228494" id="2228494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6705.html" id="ALSA-2023:6705" type="self" title="ALSA-2023:6705"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="procps-ng-i18n" version="3.3.17" release="13.el9" epoch="0" arch="noarch" src="procps-ng-3.3.17-13.el9.src.rpm">
          <filename>procps-ng-i18n-3.3.17-13.el9.noarch.rpm</filename>
          <sum type="sha256">592e2cdb77f70527fad67f55c9d6ffa97d95c28e78af0afe278c7245becfdb73</sum>
        </package>
        <package name="procps-ng" version="3.3.17" release="13.el9" epoch="0" arch="i686" src="procps-ng-3.3.17-13.el9.src.rpm">
          <filename>procps-ng-3.3.17-13.el9.i686.rpm</filename>
          <sum type="sha256">b11512eccdee7bdc00ac38e6375734b37f6000ee42e1689e021772e8314507f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6707</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502)
* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6707" id="RHSA-2023:6707" type="rhsa" title="RHSA-2023:6707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3502" id="CVE-2021-3502" type="cve" title="CVE-2021-3502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1946914" id="1946914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6707.html" id="ALSA-2023:6707" type="self" title="ALSA-2023:6707"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="avahi-libs" version="0.8" release="15.el9" epoch="0" arch="i686" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-libs-0.8-15.el9.i686.rpm</filename>
          <sum type="sha256">0e190c72eb5afc2ac6e82b755db0ab7cae3b2a81598ae5ab5c947b3f0021f07a</sum>
        </package>
        <package name="avahi" version="0.8" release="15.el9" epoch="0" arch="i686" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-0.8-15.el9.i686.rpm</filename>
          <sum type="sha256">19b5a92775fe1f0bac4b1c2623a0d96cfccadd68ad30e38afca1588f81ade536</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6744</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6744" id="RHSA-2023:6744" type="rhsa" title="RHSA-2023:6744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6744.html" id="ALSA-2023:6744" type="self" title="ALSA-2023:6744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libwbclient" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libwbclient-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">1ac537c06dcf25b631a04548088fbafe279e4bcc48c90d6f62494e9365ae066d</sum>
        </package>
        <package name="libsmbclient" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libsmbclient-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">1e3705856d133c5849ef99438921aff0eba844c99f09ffd401d0236b4e6c05e3</sum>
        </package>
        <package name="libnetapi" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libnetapi-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">3fe458daa4e1d6fd208fd9928f7a030b48aa26939ff4d3b877bf1a0bd2e07f2e</sum>
        </package>
        <package name="samba-client-libs" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-client-libs-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">499c80d6884d8eecad4ff7301dd136b10a9a528844f2fcf73cc397a340a6dad4</sum>
        </package>
        <package name="samba-libs" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-libs-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">4dce98e384e1c3fc3a2189d45057923fe8f935b7acb4d0ff49724b1b4f9e7d28</sum>
        </package>
        <package name="python3-samba" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>python3-samba-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">5f4cb831762cba60360bcbfb7ebfdd05c890d6db9034ed8b571e0c08a426a8a6</sum>
        </package>
        <package name="samba-dc-libs" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-dc-libs-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">9c99c84eeabd9432c1212ede143367d0b1b6d9a26e143db47c7a839f9bae159f</sum>
        </package>
        <package name="samba-common" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="noarch" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-common-4.18.6-101.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">b707261cea20c2825f6afd14541833e2726a126b938ceb58f2dc1011a77f5380</sum>
        </package>
        <package name="samba-winbind-modules" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-winbind-modules-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">e04166ef574565b4285a21cabc9200b350288dc96724e099a6cfa6d120565299</sum>
        </package>
        <package name="samba-common-libs" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="i686" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-common-libs-4.18.6-101.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">ff7c39ceb7e135a5f774ae27d58cc26b5356e296e27cfa6cabcf3605b3f1ec5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6745</id>
    <title>Important: curl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545)
* curl: cookie injection with none file (CVE-2023-38546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6745" id="RHSA-2023:6745" type="rhsa" title="RHSA-2023:6745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38545" id="CVE-2023-38545" type="cve" title="CVE-2023-38545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38546" id="CVE-2023-38546" type="cve" title="CVE-2023-38546"/>
      <reference href="https://bugzilla.redhat.com/2241933" id="2241933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241938" id="2241938" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6745.html" id="ALSA-2023:6745" type="self" title="ALSA-2023:6745"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="26.el9_3.2" epoch="0" arch="i686" src="curl-7.76.1-26.el9_3.2.src.rpm">
          <filename>libcurl-minimal-7.76.1-26.el9_3.2.i686.rpm</filename>
          <sum type="sha256">9abf40a9c978bd87624a0dad792d1f6eee67d4b3baa93112849d5be950c764ba</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="26.el9_3.2" epoch="0" arch="i686" src="curl-7.76.1-26.el9_3.2.src.rpm">
          <filename>libcurl-7.76.1-26.el9_3.2.i686.rpm</filename>
          <sum type="sha256">9cbf8115f0901a41b0e129d801395867be99ee164cc8a1cf8040f852f3ff1c06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6746</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6746" id="RHSA-2023:6746" type="rhsa" title="RHSA-2023:6746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6746.html" id="ALSA-2023:6746" type="self" title="ALSA-2023:6746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_2_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_2_default</name>
        <package name="libnghttp2" version="1.43.0" release="5.el9_3.1" epoch="0" arch="i686" src="nghttp2-1.43.0-5.el9_3.1.src.rpm">
          <filename>libnghttp2-1.43.0-5.el9_3.1.i686.rpm</filename>
          <sum type="sha256">ed7f0cddf6403bef1570fba9a55c61a29faf92aa95c488056b350d21642b5cbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7747</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7747" id="RHSA-2023:7747" type="rhsa" title="RHSA-2023:7747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39615" id="CVE-2023-39615" type="cve" title="CVE-2023-39615"/>
      <reference href="https://bugzilla.redhat.com/2235864" id="2235864" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7747.html" id="ALSA-2023:7747" type="self" title="ALSA-2023:7747"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="libxml2" version="2.9.13" release="5.el9_3" epoch="0" arch="i686" src="libxml2-2.9.13-5.el9_3.src.rpm">
          <filename>libxml2-2.9.13-5.el9_3.i686.rpm</filename>
          <sum type="sha256">a9a2093eb5e71a9e4f39901b0819c2f84abed7647e5218dae9fa5fe5830ee0f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7879</id>
    <title>Moderate: opensc security update</title>
    <issued date="2023-12-19 00:00:00"/>
    <updated date="2023-12-22 09:44:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opensc security update</summary>
    <description>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.

Security Fix(es):

* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660)
* OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661)
* OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys (CVE-2023-4535)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7879" id="RHSA-2023:7879" type="rhsa" title="RHSA-2023:7879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40660" id="CVE-2023-40660" type="cve" title="CVE-2023-40660"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40661" id="CVE-2023-40661" type="cve" title="CVE-2023-40661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4535" id="CVE-2023-4535" type="cve" title="CVE-2023-4535"/>
      <reference href="https://bugzilla.redhat.com/2240912" id="2240912" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240913" id="2240913" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240914" id="2240914" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7879.html" id="ALSA-2023:7879" type="self" title="ALSA-2023:7879"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="opensc" version="0.23.0" release="3.el9_3" epoch="0" arch="i686" src="opensc-0.23.0-3.el9_3.src.rpm">
          <filename>opensc-0.23.0-3.el9_3.i686.rpm</filename>
          <sum type="sha256">77b97cacf5d620b43bd95de1db9debf377115a6c736fadebb1e9b8387c388e19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0310</id>
    <title>Moderate: openssl security update</title>
    <issued date="2024-01-22 00:00:00"/>
    <updated date="2024-01-22 08:01:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0310" id="RHSA-2024:0310" type="rhsa" title="RHSA-2024:0310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5363" id="CVE-2023-5363" type="cve" title="CVE-2023-5363"/>
      <reference href="https://bugzilla.redhat.com/2243839" id="2243839" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0310.html" id="ALSA-2024:0310" type="self" title="ALSA-2024:0310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="openssl-libs" version="3.0.7" release="25.el9_3" epoch="1" arch="i686" src="openssl-3.0.7-25.el9_3.src.rpm">
          <filename>openssl-libs-3.0.7-25.el9_3.i686.rpm</filename>
          <sum type="sha256">6b0c98b8382b4718b07524d307487da343e7d6e9143029d17488c0068aeb55e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0463</id>
    <title>Moderate: rpm security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:52:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rpm security update</summary>
    <description>The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.

Security Fix(es):

* rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937)
* rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938)
* rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0463" id="RHSA-2024:0463" type="rhsa" title="RHSA-2024:0463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35937" id="CVE-2021-35937" type="cve" title="CVE-2021-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35938" id="CVE-2021-35938" type="cve" title="CVE-2021-35938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35939" id="CVE-2021-35939" type="cve" title="CVE-2021-35939"/>
      <reference href="https://bugzilla.redhat.com/1964114" id="1964114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964125" id="1964125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964129" id="1964129" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0463.html" id="ALSA-2024:0463" type="self" title="ALSA-2024:0463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="rpm-libs" version="4.16.1.3" release="27.el9_3" epoch="0" arch="i686" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-libs-4.16.1.3-27.el9_3.i686.rpm</filename>
          <sum type="sha256">a0507869ad62c90ff29af2b076c13ecd12dd7ddc094e2907845c0f864ddfd87d</sum>
        </package>
        <package name="rpm-build-libs" version="4.16.1.3" release="27.el9_3" epoch="0" arch="i686" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-build-libs-4.16.1.3-27.el9_3.i686.rpm</filename>
          <sum type="sha256">a3686034fae229695ce3c2bef0bfc35a0f40c1efd91564a498f868a463ce9460</sum>
        </package>
        <package name="rpm-sign-libs" version="4.16.1.3" release="27.el9_3" epoch="0" arch="i686" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-sign-libs-4.16.1.3-27.el9_3.i686.rpm</filename>
          <sum type="sha256">aa05f639292fb30baf5db7d546cecf42ea08be847f2204e4a7efee409ff7202d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0464</id>
    <title>Moderate: python-urllib3 security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:46:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.

Security Fix(es):

* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0464" id="RHSA-2024:0464" type="rhsa" title="RHSA-2024:0464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45803" id="CVE-2023-45803" type="cve" title="CVE-2023-45803"/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246840" id="2246840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0464.html" id="ALSA-2024:0464" type="self" title="ALSA-2024:0464"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="python3-urllib3" version="1.26.5" release="3.el9_3.1" epoch="0" arch="noarch" src="python-urllib3-1.26.5-3.el9_3.1.src.rpm">
          <filename>python3-urllib3-1.26.5-3.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">b10c9569d32ff47bdb1d446b72060944656edae700c6aa03a090ebaa341e2420</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0465</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:37:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0465" id="RHSA-2024:0465" type="rhsa" title="RHSA-2024:0465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7104" id="CVE-2023-7104" type="cve" title="CVE-2023-7104"/>
      <reference href="https://bugzilla.redhat.com/2256194" id="2256194" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0465.html" id="ALSA-2024:0465" type="self" title="ALSA-2024:0465"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="sqlite-libs" version="3.34.1" release="7.el9_3" epoch="0" arch="i686" src="sqlite-3.34.1-7.el9_3.src.rpm">
          <filename>sqlite-libs-3.34.1-7.el9_3.i686.rpm</filename>
          <sum type="sha256">dc6946a8344b8f4f476fef9479d1786c86fdcd045e988ab5d85fef7780e1fae4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0466</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:26:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0466" id="RHSA-2024:0466" type="rhsa" title="RHSA-2024:0466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0466.html" id="ALSA-2024:0466" type="self" title="ALSA-2024:0466"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="python3-libs" version="3.9.18" release="1.el9_3.1" epoch="0" arch="i686" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-libs-3.9.18-1.el9_3.1.i686.rpm</filename>
          <sum type="sha256">792aff4d819f4c9d33f29f919c0303f7690b159e508b07881fe9ec548c77ca7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0468</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-26 10:16:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: bypass the GRUB password protection feature (CVE-2023-4001)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0468" id="RHSA-2024:0468" type="rhsa" title="RHSA-2024:0468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4001" id="CVE-2023-4001" type="cve" title="CVE-2023-4001"/>
      <reference href="https://bugzilla.redhat.com/2224951" id="2224951" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0468.html" id="ALSA-2024:0468" type="self" title="ALSA-2024:0468"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="grub2-efi-aa64-modules" version="2.06" release="70.el9_3.2.alma.1" epoch="1" arch="noarch" src="grub2-2.06-70.el9_3.2.alma.1.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">179ea165d11bcf99836b5ef8b9c8d4b48e76d81e07195622afbb30245804ca46</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="70.el9_3.2.alma.1" epoch="1" arch="noarch" src="grub2-2.06-70.el9_3.2.alma.1.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">1e79dc1c4e529f35e1444b4c58a10f81faa74700d2697a25d972a41bbb0adba9</sum>
        </package>
        <package name="grub2-common" version="2.06" release="70.el9_3.2.alma.1" epoch="1" arch="noarch" src="grub2-2.06-70.el9_3.2.alma.1.src.rpm">
          <filename>grub2-common-2.06-70.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">7d3d0624d4d27e1ca89edd58f4230c2cf00c3d0372d88fa625ae4de77ef118f7</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="70.el9_3.2.alma.1" epoch="1" arch="noarch" src="grub2-2.06-70.el9_3.2.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-70.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">7fb83679f32899bb37e8d3ca371a80d8b46e9463020fa545c6bbf428a2348a43</sum>
        </package>
        <package name="grub2-pc-modules" version="2.06" release="70.el9_3.2.alma.1" epoch="1" arch="noarch" src="grub2-2.06-70.el9_3.2.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-70.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">95f803595806417954794916c929e285cf90733f5c2f201d4bf84c5232be65f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0533</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-01-29 00:00:00"/>
    <updated date="2024-01-29 16:57:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)
* gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)
* gnutls: rejects certificate chain with distributed trust (CVE-2024-0567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0533" id="RHSA-2024:0533" type="rhsa" title="RHSA-2024:0533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5981" id="CVE-2023-5981" type="cve" title="CVE-2023-5981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0553" id="CVE-2024-0553" type="cve" title="CVE-2024-0553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0567" id="CVE-2024-0567" type="cve" title="CVE-2024-0567"/>
      <reference href="https://bugzilla.redhat.com/2248445" id="2248445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258412" id="2258412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258544" id="2258544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0533.html" id="ALSA-2024:0533" type="self" title="ALSA-2024:0533"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="gnutls" version="3.7.6" release="23.el9_3.3" epoch="0" arch="i686" src="gnutls-3.7.6-23.el9_3.3.src.rpm">
          <filename>gnutls-3.7.6-23.el9_3.3.i686.rpm</filename>
          <sum type="sha256">24c0361cb2ce5bfa0e5a3a8f8f17968403a3c3ef7f55847f41c7edeb0fb453f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0966</id>
    <title>Moderate: opensc security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:18:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opensc security update</summary>
    <description>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.

Security Fix(es):

* OpenSC: Side-channel leaks while stripping encryption PKCS#1 padding (CVE-2023-5992)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0966" id="RHSA-2024:0966" type="rhsa" title="RHSA-2024:0966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5992" id="CVE-2023-5992" type="cve" title="CVE-2023-5992"/>
      <reference href="https://bugzilla.redhat.com/2248685" id="2248685" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0966.html" id="ALSA-2024:0966" type="self" title="ALSA-2024:0966"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="opensc" version="0.23.0" release="4.el9_3" epoch="0" arch="i686" src="opensc-0.23.0-4.el9_3.src.rpm">
          <filename>opensc-0.23.0-4.el9_3.i686.rpm</filename>
          <sum type="sha256">2c3d0d3eb7d706b1da1d89d1704234e6f37eac49e62dae3dea8156d3408058d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10244</id>
    <title>Important: pam:1.5.1 security update</title>
    <issued date="2024-11-25 00:00:00"/>
    <updated date="2024-12-02 10:41:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam:1.5.1 security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10244" id="RHSA-2024:10244" type="rhsa" title="RHSA-2024:10244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10963" id="CVE-2024-10963" type="cve" title="CVE-2024-10963"/>
      <reference href="https://bugzilla.redhat.com/2324291" id="2324291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10244.html" id="ALSA-2024:10244" type="self" title="ALSA-2024:10244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="pam" version="1.5.1" release="22.el9_5" epoch="0" arch="i686" src="pam-1.5.1-22.el9_5.src.rpm">
          <filename>pam-1.5.1-22.el9_5.i686.rpm</filename>
          <sum type="sha256">f2ae4441fc667cdcb930e7a2cfe90f7342e7d1c8848d6d18cb350ba68e025862</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10274</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-03 07:57:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009)
  * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244)
  * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10274" id="RHSA-2024:10274" type="rhsa" title="RHSA-2024:10274"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41009" id="CVE-2024-41009" type="cve" title="CVE-2024-41009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42244" id="CVE-2024-42244" type="cve" title="CVE-2024-42244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50226" id="CVE-2024-50226" type="cve" title="CVE-2024-50226"/>
      <reference href="https://bugzilla.redhat.com/2298412" id="2298412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324876" id="2324876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10274.html" id="ALSA-2024:10274" type="self" title="ALSA-2024:10274"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.15.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">1d5e5d44b9f6c7e7e0651497c28595d44c3fd0f7d3be85f7804b0d99f01f4b17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10384</id>
    <title>Important: tuned security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-02 10:37:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tuned security update</summary>
    <description>The tuned packages provide a service that tunes system settings according to a selected profile.  

Security Fix(es):  

  * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336)
  * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10384" id="RHSA-2024:10384" type="rhsa" title="RHSA-2024:10384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52336" id="CVE-2024-52336" type="cve" title="CVE-2024-52336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52337" id="CVE-2024-52337" type="cve" title="CVE-2024-52337"/>
      <reference href="https://bugzilla.redhat.com/2324540" id="2324540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324541" id="2324541" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10384.html" id="ALSA-2024:10384" type="self" title="ALSA-2024:10384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="tuned-profiles-cpu-partitioning" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-cpu-partitioning-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">9662c799e8afb9456a6ae87280a7d8704c0afedfc6811f6dc0c64f8959655bc3</sum>
        </package>
        <package name="tuned" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">ca29a8e23a29740e54208ed8a3464161c12a39e92a0325471b77322465e6bcab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10939</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 15:05:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)
  * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)
  * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949)
  * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10939" id="RHSA-2024:10939" type="rhsa" title="RHSA-2024:10939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26615" id="CVE-2024-26615" type="cve" title="CVE-2024-26615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44994" id="CVE-2024-44994" type="cve" title="CVE-2024-44994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46695" id="CVE-2024-46695" type="cve" title="CVE-2024-46695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49949" id="CVE-2024-49949" type="cve" title="CVE-2024-49949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50251" id="CVE-2024-50251" type="cve" title="CVE-2024-50251"/>
      <reference href="https://bugzilla.redhat.com/2267355" id="2267355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309857" id="2309857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312083" id="2312083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320505" id="2320505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324886" id="2324886" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10939.html" id="ALSA-2024:10939" type="self" title="ALSA-2024:10939"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.16.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">8aa4b120084589a342a50e5f8febaf33ab97c3b99b3d9241dd29055c6e84256a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10983</id>
    <title>Moderate: python3.9:3.9.21 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:37:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9:3.9.21 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10983" id="RHSA-2024:10983" type="rhsa" title="RHSA-2024:10983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10983.html" id="ALSA-2024:10983" type="self" title="ALSA-2024:10983"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="python3" version="3.9.21" release="1.el9_5" epoch="0" arch="i686" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-3.9.21-1.el9_5.i686.rpm</filename>
          <sum type="sha256">b02a15f844996e94de9fee1c590d984c6de84a1e9465f9941ec91d670f664170</sum>
        </package>
        <package name="python3-libs" version="3.9.21" release="1.el9_5" epoch="0" arch="i686" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-libs-3.9.21-1.el9_5.i686.rpm</filename>
          <sum type="sha256">e1b73c40ad80733ac578b409567eebf7164dc4188170c8705cb4de71d63deadf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11250</id>
    <title>Moderate: pam security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 10:50:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11250" id="RHSA-2024:11250" type="rhsa" title="RHSA-2024:11250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10041" id="CVE-2024-10041" type="cve" title="CVE-2024-10041"/>
      <reference href="https://bugzilla.redhat.com/2319212" id="2319212" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11250.html" id="ALSA-2024:11250" type="self" title="ALSA-2024:11250"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="pam" version="1.5.1" release="21.el9_5" epoch="0" arch="i686" src="pam-1.5.1-21.el9_5.src.rpm">
          <filename>pam-1.5.1-21.el9_5.i686.rpm</filename>
          <sum type="sha256">bbc696ba3b60b23321df08c27e8a6d02ea72516e4678380e7d07e696f188cf4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1129</id>
    <title>Moderate: curl security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 19:57:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1129" id="RHSA-2024:1129" type="rhsa" title="RHSA-2024:1129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46218" id="CVE-2023-46218" type="cve" title="CVE-2023-46218"/>
      <reference href="https://bugzilla.redhat.com/2252030" id="2252030" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1129.html" id="ALSA-2024:1129" type="self" title="ALSA-2024:1129"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="26.el9_3.3" epoch="0" arch="i686" src="curl-7.76.1-26.el9_3.3.src.rpm">
          <filename>libcurl-minimal-7.76.1-26.el9_3.3.i686.rpm</filename>
          <sum type="sha256">7997a230dfc8a0c3ecc879cc845c075b8bd50d89814f5522b5f37d035ef8901b</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="26.el9_3.3" epoch="0" arch="i686" src="curl-7.76.1-26.el9_3.3.src.rpm">
          <filename>libcurl-7.76.1-26.el9_3.3.i686.rpm</filename>
          <sum type="sha256">f400e2e218b5227773902cf04aeaaa650a5a58a7a46dc2433a6febb9fcb162a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11486</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-19 00:00:00"/>
    <updated date="2025-01-13 20:04:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)
  * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)
  * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020)
  * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697)
  * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675)
  * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888)
  * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
  * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
  * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125)
  * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124)
  * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115)
  * kernel: xfrm: validate new SA&amp;#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142)
  * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148)
  * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
  * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255)
  * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223)
  * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11486" id="RHSA-2024:11486" type="rhsa" title="RHSA-2024:11486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27399" id="CVE-2024-27399" type="cve" title="CVE-2024-27399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38564" id="CVE-2024-38564" type="cve" title="CVE-2024-38564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45020" id="CVE-2024-45020" type="cve" title="CVE-2024-45020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46697" id="CVE-2024-46697" type="cve" title="CVE-2024-46697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47675" id="CVE-2024-47675" type="cve" title="CVE-2024-47675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49888" id="CVE-2024-49888" type="cve" title="CVE-2024-49888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50099" id="CVE-2024-50099" type="cve" title="CVE-2024-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50110" id="CVE-2024-50110" type="cve" title="CVE-2024-50110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50115" id="CVE-2024-50115" type="cve" title="CVE-2024-50115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50124" id="CVE-2024-50124" type="cve" title="CVE-2024-50124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50125" id="CVE-2024-50125" type="cve" title="CVE-2024-50125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50142" id="CVE-2024-50142" type="cve" title="CVE-2024-50142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50148" id="CVE-2024-50148" type="cve" title="CVE-2024-50148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50192" id="CVE-2024-50192" type="cve" title="CVE-2024-50192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50223" id="CVE-2024-50223" type="cve" title="CVE-2024-50223"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50255" id="CVE-2024-50255" type="cve" title="CVE-2024-50255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50262" id="CVE-2024-50262" type="cve" title="CVE-2024-50262"/>
      <reference href="https://bugzilla.redhat.com/2280462" id="2280462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293429" id="2293429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311717" id="2311717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312085" id="2312085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320254" id="2320254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320517" id="2320517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323904" id="2323904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323930" id="2323930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323937" id="2323937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323944" id="2323944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323955" id="2323955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324315" id="2324315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324332" id="2324332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324612" id="2324612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324867" id="2324867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324868" id="2324868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324892" id="2324892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11486.html" id="ALSA-2024:11486" type="self" title="ALSA-2024:11486"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.19.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">02c4d188d748c129c6ea4d2bc3827ce7842d3ae90f3bba5af8826813fe9d2155</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1239</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2024-03-07 00:00:00"/>
    <updated date="2024-03-11 11:17:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Security Fix(es):

* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1239" id="RHSA-2024:1239" type="rhsa" title="RHSA-2024:1239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0914" id="CVE-2024-0914" type="cve" title="CVE-2024-0914"/>
      <reference href="https://bugzilla.redhat.com/2260407" id="2260407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1239.html" id="ALSA-2024:1239" type="self" title="ALSA-2024:1239"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="opencryptoki-libs" version="3.21.0" release="9.el9_3.alma.1" epoch="0" arch="i686" src="opencryptoki-3.21.0-9.el9_3.alma.1.src.rpm">
          <filename>opencryptoki-libs-3.21.0-9.el9_3.alma.1.i686.rpm</filename>
          <sum type="sha256">0aac50c7725512b0c6286dddfa80c008282e6ff34f98a3d22d6c420ee9b7f26f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1530</id>
    <title>Moderate: expat security update</title>
    <issued date="2024-03-26 00:00:00"/>
    <updated date="2024-04-02 08:32:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)
* expat: XML Entity Expansion (CVE-2024-28757)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1530" id="RHSA-2024:1530" type="rhsa" title="RHSA-2024:1530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52425" id="CVE-2023-52425" type="cve" title="CVE-2023-52425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28757" id="CVE-2024-28757" type="cve" title="CVE-2024-28757"/>
      <reference href="https://bugzilla.redhat.com/2262877" id="2262877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268766" id="2268766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1530.html" id="ALSA-2024:1530" type="self" title="ALSA-2024:1530"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="expat" version="2.5.0" release="1.el9_3.1" epoch="0" arch="i686" src="expat-2.5.0-1.el9_3.1.src.rpm">
          <filename>expat-2.5.0-1.el9_3.1.i686.rpm</filename>
          <sum type="sha256">8d5d37a481367f45543af1bb5d3f1f8cd4af65373ecc2faa7d9b3f98c2bf4e3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1879</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 10:27:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)
* gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1879" id="RHSA-2024:1879" type="rhsa" title="RHSA-2024:1879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28834" id="CVE-2024-28834" type="cve" title="CVE-2024-28834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28835" id="CVE-2024-28835" type="cve" title="CVE-2024-28835"/>
      <reference href="https://bugzilla.redhat.com/2269084" id="2269084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269228" id="2269228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1879.html" id="ALSA-2024:1879" type="self" title="ALSA-2024:1879"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_3_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_3_default</name>
        <package name="gnutls" version="3.7.6" release="23.el9_3.4" epoch="0" arch="i686" src="gnutls-3.7.6-23.el9_3.4.src.rpm">
          <filename>gnutls-3.7.6-23.el9_3.4.i686.rpm</filename>
          <sum type="sha256">7473d486f7aa8811b485487653a81a19365d30d288336045f01f6a7f785768e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2394</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-11-03 22:05:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)
  * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582)
  * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
  * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)
  * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448)
  * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934)
  * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040)
  * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531)
  * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931)
  * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023)
  * kernel: irdma: Improper access control (CVE-2023-25775)
  * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464)
  * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866)
  * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083)
  * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194)
  * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756)
  * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863)
  * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)
  * kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage (CVE-2023-52489)
  * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)
  * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581)
  * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580)
  * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565)
  * kernel: tls: race between async notify and socket close (CVE-2024-26583)
  * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584)
  * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585)
  * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
  * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)
  * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609)
  * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176)
  * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476)
  * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)
  * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2394" id="RHSA-2024:2394" type="rhsa" title="RHSA-2024:2394"/>
      <reference href="https://bugzilla.redhat.com/1918601" id="1918601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2049700" id="2049700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133452" id="2133452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151959" id="2151959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177759" id="2177759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185519" id="2185519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188102" id="2188102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210024" id="2210024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213132" id="2213132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218332" id="2218332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219359" id="2219359" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221039" id="2221039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221463" id="2221463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221702" id="2221702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226777" id="2226777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226787" id="2226787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226788" id="2226788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231410" id="2231410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239845" id="2239845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239848" id="2239848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244720" id="2244720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246980" id="2246980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250043" id="2250043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252731" id="2252731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253034" id="2253034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253632" id="2253632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254961" id="2254961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254982" id="2254982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255283" id="2255283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255498" id="2255498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256490" id="2256490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256822" id="2256822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257682" id="2257682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258013" id="2258013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258518" id="2258518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260005" id="2260005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262126" id="2262126" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262127" id="2262127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265285" id="2265285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265517" id="2265517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265518" id="2265518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265519" id="2265519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265520" id="2265520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265645" id="2265645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265646" id="2265646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265653" id="2265653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267041" id="2267041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267695" id="2267695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267750" id="2267750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267758" id="2267758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267760" id="2267760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267761" id="2267761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267788" id="2267788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267795" id="2267795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269189" id="2269189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269217" id="2269217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270080" id="2270080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270118" id="2270118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270883" id="2270883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2394.html" id="ALSA-2024:2394" type="self" title="ALSA-2024:2394"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2020-26555.html" id="CVE-2020-26555" type="cve" title="CVE-2020-26555"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-0480.html" id="CVE-2022-0480" type="cve" title="CVE-2022-0480"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-38096.html" id="CVE-2022-38096" type="cve" title="CVE-2022-38096"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-45934.html" id="CVE-2022-45934" type="cve" title="CVE-2022-45934"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-24023.html" id="CVE-2023-24023" type="cve" title="CVE-2023-24023"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-25775.html" id="CVE-2023-25775" type="cve" title="CVE-2023-25775"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28464.html" id="CVE-2023-28464" type="cve" title="CVE-2023-28464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28866.html" id="CVE-2023-28866" type="cve" title="CVE-2023-28866"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-31083.html" id="CVE-2023-31083" type="cve" title="CVE-2023-31083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-3567.html" id="CVE-2023-3567" type="cve" title="CVE-2023-3567"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-37453.html" id="CVE-2023-37453" type="cve" title="CVE-2023-37453"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39189.html" id="CVE-2023-39189" type="cve" title="CVE-2023-39189"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39193.html" id="CVE-2023-39193" type="cve" title="CVE-2023-39193"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39194.html" id="CVE-2023-39194" type="cve" title="CVE-2023-39194"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39198.html" id="CVE-2023-39198" type="cve" title="CVE-2023-39198"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-4133.html" id="CVE-2023-4133" type="cve" title="CVE-2023-4133"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42754.html" id="CVE-2023-42754" type="cve" title="CVE-2023-42754"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42756.html" id="CVE-2023-42756" type="cve" title="CVE-2023-42756"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-45863.html" id="CVE-2023-45863" type="cve" title="CVE-2023-45863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-46862.html" id="CVE-2023-46862" type="cve" title="CVE-2023-46862"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51043.html" id="CVE-2023-51043" type="cve" title="CVE-2023-51043"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51779.html" id="CVE-2023-51779" type="cve" title="CVE-2023-51779"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51780.html" id="CVE-2023-51780" type="cve" title="CVE-2023-51780"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52434.html" id="CVE-2023-52434" type="cve" title="CVE-2023-52434"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52448.html" id="CVE-2023-52448" type="cve" title="CVE-2023-52448"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52450.html" id="CVE-2023-52450" type="cve" title="CVE-2023-52450"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52476.html" id="CVE-2023-52476" type="cve" title="CVE-2023-52476"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52489.html" id="CVE-2023-52489" type="cve" title="CVE-2023-52489"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52522.html" id="CVE-2023-52522" type="cve" title="CVE-2023-52522"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52529.html" id="CVE-2023-52529" type="cve" title="CVE-2023-52529"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52574.html" id="CVE-2023-52574" type="cve" title="CVE-2023-52574"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52578.html" id="CVE-2023-52578" type="cve" title="CVE-2023-52578"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52580.html" id="CVE-2023-52580" type="cve" title="CVE-2023-52580"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52581.html" id="CVE-2023-52581" type="cve" title="CVE-2023-52581"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52597.html" id="CVE-2023-52597" type="cve" title="CVE-2023-52597"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52610.html" id="CVE-2023-52610" type="cve" title="CVE-2023-52610"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52620.html" id="CVE-2023-52620" type="cve" title="CVE-2023-52620"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6040.html" id="CVE-2023-6040" type="cve" title="CVE-2023-6040"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6121.html" id="CVE-2023-6121" type="cve" title="CVE-2023-6121"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6176.html" id="CVE-2023-6176" type="cve" title="CVE-2023-6176"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6531.html" id="CVE-2023-6531" type="cve" title="CVE-2023-6531"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6546.html" id="CVE-2023-6546" type="cve" title="CVE-2023-6546"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6622.html" id="CVE-2023-6622" type="cve" title="CVE-2023-6622"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6915.html" id="CVE-2023-6915" type="cve" title="CVE-2023-6915"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6931.html" id="CVE-2023-6931" type="cve" title="CVE-2023-6931"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6932.html" id="CVE-2023-6932" type="cve" title="CVE-2023-6932"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0565.html" id="CVE-2024-0565" type="cve" title="CVE-2024-0565"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0841.html" id="CVE-2024-0841" type="cve" title="CVE-2024-0841"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1085.html" id="CVE-2024-1085" type="cve" title="CVE-2024-1085"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25744.html" id="CVE-2024-25744" type="cve" title="CVE-2024-25744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26582.html" id="CVE-2024-26582" type="cve" title="CVE-2024-26582"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26583.html" id="CVE-2024-26583" type="cve" title="CVE-2024-26583"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26584.html" id="CVE-2024-26584" type="cve" title="CVE-2024-26584"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26585.html" id="CVE-2024-26585" type="cve" title="CVE-2024-26585"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26586.html" id="CVE-2024-26586" type="cve" title="CVE-2024-26586"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26593.html" id="CVE-2024-26593" type="cve" title="CVE-2024-26593"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26602.html" id="CVE-2024-26602" type="cve" title="CVE-2024-26602"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26609.html" id="CVE-2024-26609" type="cve" title="CVE-2024-26609"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26633.html" id="CVE-2024-26633" type="cve" title="CVE-2024-26633"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26671.html" id="CVE-2024-26671" type="cve" title="CVE-2024-26671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.13.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">12854ee27cae13fd20945a3c7aeec81b22b24fb8e5e6494387d39c7b838ccc76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2410</id>
    <title>Moderate: harfbuzz security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>harfbuzz security update</summary>
    <description>HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

* harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2410" id="RHSA-2024:2410" type="rhsa" title="RHSA-2024:2410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2410.html" id="ALSA-2024:2410" type="self" title="ALSA-2024:2410"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="harfbuzz" version="2.7.4" release="10.el9" epoch="0" arch="i686" src="harfbuzz-2.7.4-10.el9.src.rpm">
          <filename>harfbuzz-2.7.4-10.el9.i686.rpm</filename>
          <sum type="sha256">5157daf2ab0a03b403d37c60b150b8f0f866754714f81e3d96368e06a16339ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2433</id>
    <title>Moderate: avahi security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:58:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2433" id="RHSA-2024:2433" type="rhsa" title="RHSA-2024:2433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2433.html" id="ALSA-2024:2433" type="self" title="ALSA-2024:2433"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="avahi-libs" version="0.8" release="20.el9" epoch="0" arch="i686" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-libs-0.8-20.el9.i686.rpm</filename>
          <sum type="sha256">cf26b9f20f10d8e85aa7447c4dbe402500c52183fb5499703387c3979729e14a</sum>
        </package>
        <package name="avahi" version="0.8" release="20.el9" epoch="0" arch="i686" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-0.8-20.el9.i686.rpm</filename>
          <sum type="sha256">ed17bf6b3e260d6eb8279682511b7e10401fcffb3e221973d0b33bc96682347f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2438</id>
    <title>Moderate: pam security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.

Security Fix(es):

* pam: allowing unprivileged user to block another user namespace (CVE-2024-22365)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2438" id="RHSA-2024:2438" type="rhsa" title="RHSA-2024:2438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22365" id="CVE-2024-22365" type="cve" title="CVE-2024-22365"/>
      <reference href="https://bugzilla.redhat.com/2257722" id="2257722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2438.html" id="ALSA-2024:2438" type="self" title="ALSA-2024:2438"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="pam" version="1.5.1" release="19.el9" epoch="0" arch="i686" src="pam-1.5.1-19.el9.src.rpm">
          <filename>pam-1.5.1-19.el9.i686.rpm</filename>
          <sum type="sha256">aa43e2ef5806472f74b1f5dc15a066fbe331e4b855d5a1ad7de9059bddea763f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2447</id>
    <title>Low: openssl and openssl-fips-provider security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openssl and openssl-fips-provider security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975)
* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)
* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)
* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)
* openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
* openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
* openssl: denial of service via null dereference (CVE-2024-0727)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2447" id="RHSA-2024:2447" type="rhsa" title="RHSA-2024:2447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2975" id="CVE-2023-2975" type="cve" title="CVE-2023-2975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3446" id="CVE-2023-3446" type="cve" title="CVE-2023-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3817" id="CVE-2023-3817" type="cve" title="CVE-2023-3817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5678" id="CVE-2023-5678" type="cve" title="CVE-2023-5678"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6129" id="CVE-2023-6129" type="cve" title="CVE-2023-6129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6237" id="CVE-2023-6237" type="cve" title="CVE-2023-6237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0727" id="CVE-2024-0727" type="cve" title="CVE-2024-0727"/>
      <reference href="https://bugzilla.redhat.com/2223016" id="2223016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224962" id="2224962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2227852" id="2227852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248616" id="2248616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257571" id="2257571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258502" id="2258502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259944" id="2259944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2447.html" id="ALSA-2024:2447" type="self" title="ALSA-2024:2447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="openssl-libs" version="3.0.7" release="27.el9" epoch="1" arch="i686" src="openssl-3.0.7-27.el9.src.rpm">
          <filename>openssl-libs-3.0.7-27.el9.i686.rpm</filename>
          <sum type="sha256">1a6991ac853f9b61d4ff97b9e0ec090dca42dc498881e97801d5ca1a3628b3f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2456</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:07:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)
* grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)
* grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2456" id="RHSA-2024:2456" type="rhsa" title="RHSA-2024:2456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4692" id="CVE-2023-4692" type="cve" title="CVE-2023-4692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4693" id="CVE-2023-4693" type="cve" title="CVE-2023-4693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1048" id="CVE-2024-1048" type="cve" title="CVE-2024-1048"/>
      <reference href="https://bugzilla.redhat.com/2236613" id="2236613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238343" id="2238343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256827" id="2256827" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2456.html" id="ALSA-2024:2456" type="self" title="ALSA-2024:2456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="grub2-pc-modules" version="2.06" release="77.el9.alma.1" epoch="1" arch="noarch" src="grub2-2.06-77.el9.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-77.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">1b0e6216aa285ff2b09fde2a5789e456445a8e73d0ed0a93df0949d84fc9139c</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="77.el9.alma.1" epoch="1" arch="noarch" src="grub2-2.06-77.el9.alma.1.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-77.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">d4419dc59c9f40d93a8a87c55f39e347002dc9ed3f1185cdea105f7a31fe102d</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.06" release="77.el9.alma.1" epoch="1" arch="noarch" src="grub2-2.06-77.el9.alma.1.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-77.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">e5ac6ac43c2b18b57fa6bf70a0141c5dbadc0eb7f808cad0545b973d75184232</sum>
        </package>
        <package name="grub2-common" version="2.06" release="77.el9.alma.1" epoch="1" arch="noarch" src="grub2-2.06-77.el9.alma.1.src.rpm">
          <filename>grub2-common-2.06-77.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">fd4804f9aabf9ab0aa42432b26d96c2a942ebbfd80c9ea052e867d50d260cf5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2463</id>
    <title>Moderate: systemd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:06:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2463" id="RHSA-2024:2463" type="rhsa" title="RHSA-2024:2463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7008" id="CVE-2023-7008" type="cve" title="CVE-2023-7008"/>
      <reference href="https://bugzilla.redhat.com/2222672" id="2222672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2463.html" id="ALSA-2024:2463" type="self" title="ALSA-2024:2463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="rhel-net-naming-sysattrs" version="252" release="32.el9_4.alma.1" epoch="0" arch="noarch" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>rhel-net-naming-sysattrs-252-32.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">2b44f8403d902496012e3bc2dcc06e1fc50676fb36b503200bb8417eb6b96187</sum>
        </package>
        <package name="systemd-container" version="252" release="32.el9_4.alma.1" epoch="0" arch="i686" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-container-252-32.el9_4.alma.1.i686.rpm</filename>
          <sum type="sha256">3085df7ec8f765bc678f646211c6d69a6ad766ad0b90731c19c20e225653b042</sum>
        </package>
        <package name="systemd-libs" version="252" release="32.el9_4.alma.1" epoch="0" arch="i686" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-libs-252-32.el9_4.alma.1.i686.rpm</filename>
          <sum type="sha256">5681d97f77fc3c63d07586386d09efed1b2ef02368fe8f983c38bb13c845137a</sum>
        </package>
        <package name="systemd" version="252" release="32.el9_4.alma.1" epoch="0" arch="i686" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-252-32.el9_4.alma.1.i686.rpm</filename>
          <sum type="sha256">887e8cde5849de81a965524238eea836a81673e7a4e9ed2306f967cb5e2a5076</sum>
        </package>
        <package name="systemd-rpm-macros" version="252" release="32.el9_4.alma.1" epoch="0" arch="noarch" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-rpm-macros-252-32.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d90c0d6253154dbaa4d1cac7580811b07043b6f51a1da78b07d86e461af91e0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2504</id>
    <title>Low: libssh security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004)
* libssh: Missing checks for return values for digests (CVE-2023-6918)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2504" id="RHSA-2024:2504" type="rhsa" title="RHSA-2024:2504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6004" id="CVE-2023-6004" type="cve" title="CVE-2023-6004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6918" id="CVE-2023-6918" type="cve" title="CVE-2023-6918"/>
      <reference href="https://bugzilla.redhat.com/2251110" id="2251110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254997" id="2254997" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2504.html" id="ALSA-2024:2504" type="self" title="ALSA-2024:2504"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="libssh-config" version="0.10.4" release="13.el9" epoch="0" arch="noarch" src="libssh-0.10.4-13.el9.src.rpm">
          <filename>libssh-config-0.10.4-13.el9.noarch.rpm</filename>
          <sum type="sha256">85ecc8ec9402526a3679378df72e4bca55583c0b6f819f5f3bc34f3f3f338430</sum>
        </package>
        <package name="libssh" version="0.10.4" release="13.el9" epoch="0" arch="i686" src="libssh-0.10.4-13.el9.src.rpm">
          <filename>libssh-0.10.4-13.el9.i686.rpm</filename>
          <sum type="sha256">d698c93cd633813e5d8aa7c519780e36104603ef30f723695eb4779eb7872f2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2512</id>
    <title>Low: file security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>file security update</summary>
    <description>The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2512" id="RHSA-2024:2512" type="rhsa" title="RHSA-2024:2512"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48554" id="CVE-2022-48554" type="cve" title="CVE-2022-48554"/>
      <reference href="https://bugzilla.redhat.com/2235714" id="2235714" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2512.html" id="ALSA-2024:2512" type="self" title="ALSA-2024:2512"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="file-libs" version="5.39" release="16.el9" epoch="0" arch="i686" src="file-5.39-16.el9.src.rpm">
          <filename>file-libs-5.39-16.el9.i686.rpm</filename>
          <sum type="sha256">edbe6d61717c3922535c019dc052f8952b27d4b635b22f1744789715480b7388</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2570</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)
* gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2570" id="RHSA-2024:2570" type="rhsa" title="RHSA-2024:2570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28834" id="CVE-2024-28834" type="cve" title="CVE-2024-28834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28835" id="CVE-2024-28835" type="cve" title="CVE-2024-28835"/>
      <reference href="https://bugzilla.redhat.com/2269084" id="2269084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269228" id="2269228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2570.html" id="ALSA-2024:2570" type="self" title="ALSA-2024:2570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="gnutls" version="3.8.3" release="4.el9_4" epoch="0" arch="i686" src="gnutls-3.8.3-4.el9_4.src.rpm">
          <filename>gnutls-3.8.3-4.el9_4.i686.rpm</filename>
          <sum type="sha256">64cf0b0136d3f9b80b07ce2d4b8ce6a4ab86617e8ef9baf560bdfa5edef825ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2571</id>
    <title>Moderate: sssd security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:05:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security and bug fix update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

* socket leak (JIRA:AlmaLinux-22340)
* Passkey cannot fall back to password (JIRA:AlmaLinux-28161)
* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2571" id="RHSA-2024:2571" type="rhsa" title="RHSA-2024:2571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2571.html" id="ALSA-2024:2571" type="self" title="ALSA-2024:2571"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-sssdconfig" version="2.9.4" release="6.el9_4" epoch="0" arch="noarch" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>python3-sssdconfig-2.9.4-6.el9_4.noarch.rpm</filename>
          <sum type="sha256">071f94740f1e4f5558d872c369f3f3c3a0ff420674c566ce9223e94bcfff4e42</sum>
        </package>
        <package name="sssd-client" version="2.9.4" release="6.el9_4" epoch="0" arch="i686" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>sssd-client-2.9.4-6.el9_4.i686.rpm</filename>
          <sum type="sha256">1a466a47b6abf549137206991f2d309aa0c809ad113648104f508856cb4e69a5</sum>
        </package>
        <package name="libsss_simpleifp" version="2.9.4" release="6.el9_4" epoch="0" arch="i686" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_simpleifp-2.9.4-6.el9_4.i686.rpm</filename>
          <sum type="sha256">5820e8dd8c83494abdda172b10126a166523a24311f49b9e75d024b75b8c4d2d</sum>
        </package>
        <package name="libipa_hbac" version="2.9.4" release="6.el9_4" epoch="0" arch="i686" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libipa_hbac-2.9.4-6.el9_4.i686.rpm</filename>
          <sum type="sha256">78850431a4185c4e24f76933b5278a5ecc2eb8cdb46cdea43efffbda565688d7</sum>
        </package>
        <package name="libsss_certmap" version="2.9.4" release="6.el9_4" epoch="0" arch="i686" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_certmap-2.9.4-6.el9_4.i686.rpm</filename>
          <sum type="sha256">7c539081efba96f6f1b830d28843f8f01495619964bd61d7104b940afc18d77c</sum>
        </package>
        <package name="libsss_idmap" version="2.9.4" release="6.el9_4" epoch="0" arch="i686" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_idmap-2.9.4-6.el9_4.i686.rpm</filename>
          <sum type="sha256">9280114c045ab8547706e386690fe876bb1df8aad9da3b2afb2f886e4b924a25</sum>
        </package>
        <package name="libsss_nss_idmap" version="2.9.4" release="6.el9_4" epoch="0" arch="i686" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_nss_idmap-2.9.4-6.el9_4.i686.rpm</filename>
          <sum type="sha256">fb1ef7e1555a3e5e62fa046fdbbac97ce59194a112930534632b48b3dae8fd4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2679</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2024-05-02 00:00:00"/>
    <updated date="2024-05-09 11:58:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2679" id="RHSA-2024:2679" type="rhsa" title="RHSA-2024:2679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25062" id="CVE-2024-25062" type="cve" title="CVE-2024-25062"/>
      <reference href="https://bugzilla.redhat.com/2262726" id="2262726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2679.html" id="ALSA-2024:2679" type="self" title="ALSA-2024:2679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="libxml2" version="2.9.13" release="6.el9_4" epoch="0" arch="i686" src="libxml2-2.9.13-6.el9_4.src.rpm">
          <filename>libxml2-2.9.13-6.el9_4.i686.rpm</filename>
          <sum type="sha256">e661e18c05e10ad18f08119459a2166903cc485226bec9420b8d0945a6315e95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2758</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-08 00:00:00"/>
    <updated date="2024-11-03 22:08:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)


Bug Fix(es):  

  * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009)
  * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235)
  * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673)
  * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678)
  * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2758" id="RHSA-2024:2758" type="rhsa" title="RHSA-2024:2758"/>
      <reference href="https://bugzilla.redhat.com/2250843" id="2250843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270836" id="2270836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2758.html" id="ALSA-2024:2758" type="self" title="ALSA-2024:2758"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-5090.html" id="CVE-2023-5090" type="cve" title="CVE-2023-5090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6240.html" id="CVE-2023-6240" type="cve" title="CVE-2023-6240"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25743.html" id="CVE-2024-25743" type="cve" title="CVE-2024-25743"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.16.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">3bbbefeddd0549e92e9aa912423166f98b363818b5086772f7fd56ee99895fc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3306</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-11-03 22:11:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)
  * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3306" id="RHSA-2024:3306" type="rhsa" title="RHSA-2024:3306"/>
      <reference href="https://bugzilla.redhat.com/2270879" id="2270879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270881" id="2270881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272816" id="2272816" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273423" id="2273423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3306.html" id="ALSA-2024:3306" type="self" title="ALSA-2024:3306"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26642.html" id="CVE-2024-26642" type="cve" title="CVE-2024-26642"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26643.html" id="CVE-2024-26643" type="cve" title="CVE-2024-26643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26673.html" id="CVE-2024-26673" type="cve" title="CVE-2024-26673"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26804.html" id="CVE-2024-26804" type="cve" title="CVE-2024-26804"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-35890.html" id="CVE-2024-35890" type="cve" title="CVE-2024-35890"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.18.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">5b969c444733f016f919ea7cda008efe29eb14d3d27d7813be7a65d252582deb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3339</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-28 10:18:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT
(CVE-2024-2961)
* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3339" id="RHSA-2024:3339" type="rhsa" title="RHSA-2024:3339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3339.html" id="ALSA-2024:3339" type="self" title="ALSA-2024:3339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="glibc" version="2.34" release="100.el9_4.2" epoch="0" arch="i686" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-2.34-100.el9_4.2.i686.rpm</filename>
          <sum type="sha256">b70f599779ab1976a95cdc0928901ac4a19b413c450ed48031c4eb7f3241dac8</sum>
        </package>
        <package name="libnsl" version="2.34" release="100.el9_4.2" epoch="0" arch="i686" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>libnsl-2.34-100.el9_4.2.i686.rpm</filename>
          <sum type="sha256">bb6e6cf8732d234926a54d39cca04d21baf51850db99a809d1c52bc0405e77ad</sum>
        </package>
        <package name="glibc-gconv-extra" version="2.34" release="100.el9_4.2" epoch="0" arch="i686" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-gconv-extra-2.34-100.el9_4.2.i686.rpm</filename>
          <sum type="sha256">d4affa6c47d2749a373d6f029cf52a165b54cc9669c119d040a9169cb9babe4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3501</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2024-05-30 00:00:00"/>
    <updated date="2024-05-30 20:12:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3501" id="RHSA-2024:3501" type="rhsa" title="RHSA-2024:3501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3501.html" id="ALSA-2024:3501" type="self" title="ALSA-2024:3501"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="libnghttp2" version="1.43.0" release="5.el9_4.3" epoch="0" arch="i686" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>libnghttp2-1.43.0-5.el9_4.3.i686.rpm</filename>
          <sum type="sha256">0cd9d328ade0313c1eda3aeefa19f47d9a898d1964f95f411789573c4bcc6368</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3619</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-06-05 00:00:00"/>
    <updated date="2024-11-03 22:14:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
  * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3619" id="RHSA-2024:3619" type="rhsa" title="RHSA-2024:3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26735" id="CVE-2024-26735" type="cve" title="CVE-2024-26735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26993" id="CVE-2024-26993" type="cve" title="CVE-2024-26993"/>
      <reference href="https://bugzilla.redhat.com/2273278" id="2273278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278314" id="2278314" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3619.html" id="ALSA-2024:3619" type="self" title="ALSA-2024:3619"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.20.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">dceb7ca8d5424a487bf88444ab35a55e07ef3f50083cd5985ae710b10f097aa5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3842</id>
    <title>Low: c-ares security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:15:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>c-ares security update</summary>
    <description>The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3842" id="RHSA-2024:3842" type="rhsa" title="RHSA-2024:3842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3842.html" id="ALSA-2024:3842" type="self" title="ALSA-2024:3842"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="c-ares" version="1.19.1" release="2.el9_4" epoch="0" arch="i686" src="c-ares-1.19.1-2.el9_4.src.rpm">
          <filename>c-ares-1.19.1-2.el9_4.i686.rpm</filename>
          <sum type="sha256">0c015faea25e85c2f024a594c619c75cefe84cba77c82a315f4b43f728a57d3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3843</id>
    <title>Moderate: cockpit security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:13:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cockpit security update</summary>
    <description>Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

* cockpit: command injection when deleting a sosreport with a crafted name (CVE-2024-2947)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3843" id="RHSA-2024:3843" type="rhsa" title="RHSA-2024:3843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2947" id="CVE-2024-2947" type="cve" title="CVE-2024-2947"/>
      <reference href="https://bugzilla.redhat.com/2271614" id="2271614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3843.html" id="ALSA-2024:3843" type="self" title="ALSA-2024:3843"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="cockpit-system" version="311.2" release="1.el9_4" epoch="0" arch="noarch" src="cockpit-311.2-1.el9_4.src.rpm">
          <filename>cockpit-system-311.2-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">0b6c5162e712cc0439838dd40e86dc8912d79e6315bd9c9c680625b995c21efa</sum>
        </package>
        <package name="cockpit-doc" version="311.2" release="1.el9_4" epoch="0" arch="noarch" src="cockpit-311.2-1.el9_4.src.rpm">
          <filename>cockpit-doc-311.2-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">86357b0231f081824fb70b7cd8f07ef710e4b4dfd63777a38de238aa314236c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3846</id>
    <title>Moderate: python-idna security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:10:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-idna security update</summary>
    <description>The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd).

Security Fix(es):

* python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3846" id="RHSA-2024:3846" type="rhsa" title="RHSA-2024:3846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3651" id="CVE-2024-3651" type="cve" title="CVE-2024-3651"/>
      <reference href="https://bugzilla.redhat.com/2274779" id="2274779" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3846.html" id="ALSA-2024:3846" type="self" title="ALSA-2024:3846"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-idna" version="2.10" release="7.el9_4.1" epoch="0" arch="noarch" src="python-idna-2.10-7.el9_4.1.src.rpm">
          <filename>python3-idna-2.10-7.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">466dae94af8101d05da26c89ac5e6cfdb2488f4e324c03eb856c034084d0ac7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4078</id>
    <title>Important: python3.9 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:58:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4078" id="RHSA-2024:4078" type="rhsa" title="RHSA-2024:4078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4078.html" id="ALSA-2024:4078" type="self" title="ALSA-2024:4078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-libs" version="3.9.18" release="3.el9_4.1" epoch="0" arch="i686" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-libs-3.9.18-3.el9_4.1.i686.rpm</filename>
          <sum type="sha256">85f9533f727c09bfc99a5c26ae8087aed15452ba25391ffbabb0ec0c36ce43f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4349</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-11-03 22:17:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626)
  * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801)
  * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
  * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)
  * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
  * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)
  * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
  * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)


Bug Fix(es):  

  * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943)
  * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672)
  * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220)
  * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687)
  * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716)
  * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641)
  * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669)
  * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252)
  * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595)
  * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083)
  * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953)
  * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4349" id="RHSA-2024:4349" type="rhsa" title="RHSA-2024:4349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47400" id="CVE-2021-47400" type="cve" title="CVE-2021-47400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52626" id="CVE-2023-52626" type="cve" title="CVE-2023-52626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52667" id="CVE-2023-52667" type="cve" title="CVE-2023-52667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26801" id="CVE-2024-26801" type="cve" title="CVE-2024-26801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26974" id="CVE-2024-26974" type="cve" title="CVE-2024-26974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27393" id="CVE-2024-27393" type="cve" title="CVE-2024-27393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35870" id="CVE-2024-35870" type="cve" title="CVE-2024-35870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35960" id="CVE-2024-35960" type="cve" title="CVE-2024-35960"/>
      <reference href="https://bugzilla.redhat.com/2271680" id="2271680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273429" id="2273429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278354" id="2278354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280745" id="2280745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281350" id="2281350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281740" id="2281740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281920" id="2281920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282336" id="2282336" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4349.html" id="ALSA-2024:4349" type="self" title="ALSA-2024:4349"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.24.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">db4fdd714b18224ee84259ccab6c9f58b6a1d11dcefb95745c2b60fb8a7639ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4583</id>
    <title>Important: kernel security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-11-03 22:20:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548)
  * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596)
  * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638)
  * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783)
  * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858)
  * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
  * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435)
  * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
  * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904)
  * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543)
  * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586)
  * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593)
  * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270)
  * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957)
  * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4583" id="RHSA-2024:4583" type="rhsa" title="RHSA-2024:4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47548" id="CVE-2021-47548" type="cve" title="CVE-2021-47548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47596" id="CVE-2021-47596" type="cve" title="CVE-2021-47596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48627" id="CVE-2022-48627" type="cve" title="CVE-2022-48627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52638" id="CVE-2023-52638" type="cve" title="CVE-2023-52638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26783" id="CVE-2024-26783" type="cve" title="CVE-2024-26783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26858" id="CVE-2024-26858" type="cve" title="CVE-2024-26858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27397" id="CVE-2024-27397" type="cve" title="CVE-2024-27397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27435" id="CVE-2024-27435" type="cve" title="CVE-2024-27435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35958" id="CVE-2024-35958" type="cve" title="CVE-2024-35958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36270" id="CVE-2024-36270" type="cve" title="CVE-2024-36270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36886" id="CVE-2024-36886" type="cve" title="CVE-2024-36886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36904" id="CVE-2024-36904" type="cve" title="CVE-2024-36904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36957" id="CVE-2024-36957" type="cve" title="CVE-2024-36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38543" id="CVE-2024-38543" type="cve" title="CVE-2024-38543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38586" id="CVE-2024-38586" type="cve" title="CVE-2024-38586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38593" id="CVE-2024-38593" type="cve" title="CVE-2024-38593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38663" id="CVE-2024-38663" type="cve" title="CVE-2024-38663"/>
      <reference href="https://bugzilla.redhat.com/2267509" id="2267509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273082" id="2273082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273466" id="2273466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275735" id="2275735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277238" id="2277238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280434" id="2280434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281131" id="2281131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281925" id="2281925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283401" id="2283401" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284541" id="2284541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284581" id="2284581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293230" id="2293230" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293380" id="2293380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293402" id="2293402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293456" id="2293456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293653" id="2293653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294225" id="2294225" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4583.html" id="ALSA-2024:4583" type="self" title="ALSA-2024:4583"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.26.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">18206d334756a20afcef825241edf3bd180951f5ba2a0bf7a1d286cb1d1a310d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4636</id>
    <title>Important: libndp security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:19:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libndp security update</summary>
    <description>Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.

Security Fix(es):

* libndp: buffer overflow in route information length field (CVE-2024-5564)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4636" id="RHSA-2024:4636" type="rhsa" title="RHSA-2024:4636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5564" id="CVE-2024-5564" type="cve" title="CVE-2024-5564"/>
      <reference href="https://bugzilla.redhat.com/2284122" id="2284122" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4636.html" id="ALSA-2024:4636" type="self" title="ALSA-2024:4636"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="libndp" version="1.8" release="6.el9_4.alma.1" epoch="0" arch="i686" src="libndp-1.8-6.el9_4.alma.1.src.rpm">
          <filename>libndp-1.8-6.el9_4.alma.1.i686.rpm</filename>
          <sum type="sha256">5e2928bad3bae4874d9855965fe8c6f17c85eafe291e0dda3147725a90789a3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4774</id>
    <title>Moderate: linux-firmware security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 10:45:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>linux-firmware security update</summary>
    <description>The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4774" id="RHSA-2024:4774" type="rhsa" title="RHSA-2024:4774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31346" id="CVE-2023-31346" type="cve" title="CVE-2023-31346"/>
      <reference href="https://bugzilla.redhat.com/2250458" id="2250458" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4774.html" id="ALSA-2024:4774" type="self" title="ALSA-2024:4774"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="iwl2030-firmware" version="18.168.6.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl2030-firmware-18.168.6.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">00003a0fe1eb6489dde6e801c030ca13aeffee4da81f37429036d3de529efd36</sum>
        </package>
        <package name="iwl6050-firmware" version="41.28.5.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl6050-firmware-41.28.5.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">0491143a660f270ab820465f9ccb194d7a6073816ed434f9e52943ab3d1ea490</sum>
        </package>
        <package name="iwl3160-firmware" version="25.30.13.0" release="143.1.el9_4" epoch="1" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl3160-firmware-25.30.13.0-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">0b65b78a5f2684271bab632af14c44330efb35f408993a582e529512bd73ccdf</sum>
        </package>
        <package name="iwl6000g2b-firmware" version="18.168.6.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl6000g2b-firmware-18.168.6.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">12f751bfaf9f33c5f6f501042f2f865a36d27c18e35218e11470bd0e7612e0d4</sum>
        </package>
        <package name="iwl5150-firmware" version="8.24.2.2" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl5150-firmware-8.24.2.2-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">137f57c496d8d89526330c251ffd7a1eef54802a13478bee4139b113a6312607</sum>
        </package>
        <package name="netronome-firmware" version="20240603" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>netronome-firmware-20240603-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">14a6d88ad5f61bc6dd34dfa01965773242cc7e23049586310a1ecb6afa0f839c</sum>
        </package>
        <package name="iwl100-firmware" version="39.31.5.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl100-firmware-39.31.5.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">1ae5672618effbbab3845a87911d30639fe44c1bc530b4e6ac7716b5461834dc</sum>
        </package>
        <package name="iwl135-firmware" version="18.168.6.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl135-firmware-18.168.6.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">1c252cfbe80a86f1cb7f7a5c32dbf5206b859a81a8f99c889259b8ae9ab6c490</sum>
        </package>
        <package name="iwl105-firmware" version="18.168.6.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl105-firmware-18.168.6.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">218eed834f88f6a0067037905544162312ad841e6fda47c0b5b3e30dd2ef00e8</sum>
        </package>
        <package name="libertas-sd8787-firmware" version="20240603" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>libertas-sd8787-firmware-20240603-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">33ebe97e1644307eb1caaaa4a22e6433c6b5d94779570c6d6fa114c222889d75</sum>
        </package>
        <package name="iwl1000-firmware" version="39.31.5.1" release="143.1.el9_4" epoch="1" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl1000-firmware-39.31.5.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">3e075f305407d5728b08538fa5c784a9843c56f6d8c93f187e080b8152371dea</sum>
        </package>
        <package name="linux-firmware" version="20240603" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>linux-firmware-20240603-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">4230f4cd4c89824ee5a7fc16702b79105504e354df3bb7a67ba91ff0764791d3</sum>
        </package>
        <package name="iwl6000g2a-firmware" version="18.168.6.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl6000g2a-firmware-18.168.6.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">6fe8f453c421c58b1fdd989c0c200512cf6058fe71e159ef2cb103d328eb46cb</sum>
        </package>
        <package name="iwl5000-firmware" version="8.83.5.1_1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl5000-firmware-8.83.5.1_1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">912b7dad27463b890f7fbe8c3a64d4bdf9bce6973ebe2c21a49df9eab52c69cc</sum>
        </package>
        <package name="iwl7260-firmware" version="25.30.13.0" release="143.1.el9_4" epoch="1" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl7260-firmware-25.30.13.0-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">92173256d6f510b4cd3fb43e29822211c88533a3b9354aa012659896d21fa3ce</sum>
        </package>
        <package name="linux-firmware-whence" version="20240603" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>linux-firmware-whence-20240603-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">ef453630f9a74bc0e8b62f4dfca9cadfd9b4277ca0389f09538482d06f9aa112</sum>
        </package>
        <package name="iwl2000-firmware" version="18.168.6.1" release="143.1.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240603-143.1.el9_4.src.rpm">
          <filename>iwl2000-firmware-18.168.6.1-143.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">fe68bc34356aa192c7ead79a2c485412255ef9d44e0355f23c02c2408e1cbae5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4776</id>
    <title>Moderate: cups security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 14:42:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4776" id="RHSA-2024:4776" type="rhsa" title="RHSA-2024:4776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35235" id="CVE-2024-35235" type="cve" title="CVE-2024-35235"/>
      <reference href="https://bugzilla.redhat.com/2290318" id="2290318" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4776.html" id="ALSA-2024:4776" type="self" title="ALSA-2024:4776"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="cups-libs" version="2.3.3op2" release="27.el9_4" epoch="1" arch="i686" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-libs-2.3.3op2-27.el9_4.i686.rpm</filename>
          <sum type="sha256">334b7d50e474d95cc6da4dcbb41b90b44bf660a989b423e1e13c00c38462f0d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4779</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:02:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4779" id="RHSA-2024:4779" type="rhsa" title="RHSA-2024:4779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4779.html" id="ALSA-2024:4779" type="self" title="ALSA-2024:4779"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-libs" version="3.9.18" release="3.el9_4.3" epoch="0" arch="i686" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-libs-3.9.18-3.el9_4.3.i686.rpm</filename>
          <sum type="sha256">e4f01fbe7ed38b939401f7d0187c98d7f60d17013f278c2ac611ac90aa7822d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4928</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-11-03 22:23:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458)
  * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773)
  * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737)
  * kernel: dm: call the resume method on internal suspend (CVE-2024-26880)
  * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852)
  * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
  * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046)
  * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030)
  * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857)
  * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907)
  * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885)
  * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809)
  * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459)
  * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924)
  * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952)
  * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743)
  * kernel: epoll: be better about file lifetimes (CVE-2024-38580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4928" id="RHSA-2024:4928" type="rhsa" title="RHSA-2024:4928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47459" id="CVE-2021-47459" type="cve" title="CVE-2021-47459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48743" id="CVE-2022-48743" type="cve" title="CVE-2022-48743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52458" id="CVE-2023-52458" type="cve" title="CVE-2023-52458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52809" id="CVE-2023-52809" type="cve" title="CVE-2023-52809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26737" id="CVE-2024-26737" type="cve" title="CVE-2024-26737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26773" id="CVE-2024-26773" type="cve" title="CVE-2024-26773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26852" id="CVE-2024-26852" type="cve" title="CVE-2024-26852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26880" id="CVE-2024-26880" type="cve" title="CVE-2024-26880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26982" id="CVE-2024-26982" type="cve" title="CVE-2024-26982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27030" id="CVE-2024-27030" type="cve" title="CVE-2024-27030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27046" id="CVE-2024-27046" type="cve" title="CVE-2024-27046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35857" id="CVE-2024-35857" type="cve" title="CVE-2024-35857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35885" id="CVE-2024-35885" type="cve" title="CVE-2024-35885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35907" id="CVE-2024-35907" type="cve" title="CVE-2024-35907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36924" id="CVE-2024-36924" type="cve" title="CVE-2024-36924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36952" id="CVE-2024-36952" type="cve" title="CVE-2024-36952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38580" id="CVE-2024-38580" type="cve" title="CVE-2024-38580"/>
      <reference href="https://bugzilla.redhat.com/2265794" id="2265794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273236" id="2273236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273274" id="2273274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275690" id="2275690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275761" id="2275761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278337" id="2278337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278435" id="2278435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278473" id="2278473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281247" id="2281247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281647" id="2281647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281700" id="2281700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282669" id="2282669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282898" id="2282898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284506" id="2284506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284598" id="2284598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293316" id="2293316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293412" id="2293412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4928.html" id="ALSA-2024:4928" type="self" title="ALSA-2024:4928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.28.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">e529722518213dcfed921c6a127b4fc8af002cb5b17c86889e8e72deaf95f234</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5363</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-11-03 22:25:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  
Security Fix(es):  

  * kernel: phy: (CVE-2024-26600)
  * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005)
  * kernel: cifs: (CVE-2024-26828)
  * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575)
  * kernel: nfs: (CVE-2024-26868)
  * kernel: igc: (CVE-2024-26853)
  * kernel: dmaengine/idxd: (CVE-2024-21823)
  * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961)
  * kernel: vt: (CVE-2024-35823)
  * kernel: efi: (CVE-2024-35800)
  * kernel: mlxsw: (CVE-2024-35852)
  * kernel: eeprom: (CVE-2024-35848)
  * kernel: ice: (CVE-2024-35911)
  * kernel: platform/x86: (CVE-2023-52864)
  * kernel: i40e: (CVE-2024-36020)
  * kernel: rtnetlink: (CVE-2024-36017)
  * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954)
  * kernel: ipvlan: (CVE-2024-33621)
  * kernel: tcp: (CVE-2024-37356)
  * kernel: virtio: (CVE-2024-37353)
  * kernel: tls: (CVE-2024-36489)
  * kernel: cxl/region: (CVE-2024-38391)
  * kernel: bonding: (CVE-2024-39487)
  * kernel: netns: (CVE-2024-40958)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5363" id="RHSA-2024:5363" type="rhsa" title="RHSA-2024:5363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47606" id="CVE-2021-47606" type="cve" title="CVE-2021-47606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52651" id="CVE-2023-52651" type="cve" title="CVE-2023-52651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52864" id="CVE-2023-52864" type="cve" title="CVE-2023-52864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21823" id="CVE-2024-21823" type="cve" title="CVE-2024-21823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26600" id="CVE-2024-26600" type="cve" title="CVE-2024-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26808" id="CVE-2024-26808" type="cve" title="CVE-2024-26808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26828" id="CVE-2024-26828" type="cve" title="CVE-2024-26828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26853" id="CVE-2024-26853" type="cve" title="CVE-2024-26853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26868" id="CVE-2024-26868" type="cve" title="CVE-2024-26868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26897" id="CVE-2024-26897" type="cve" title="CVE-2024-26897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27049" id="CVE-2024-27049" type="cve" title="CVE-2024-27049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27052" id="CVE-2024-27052" type="cve" title="CVE-2024-27052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27065" id="CVE-2024-27065" type="cve" title="CVE-2024-27065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27417" id="CVE-2024-27417" type="cve" title="CVE-2024-27417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27434" id="CVE-2024-27434" type="cve" title="CVE-2024-27434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33621" id="CVE-2024-33621" type="cve" title="CVE-2024-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35789" id="CVE-2024-35789" type="cve" title="CVE-2024-35789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35800" id="CVE-2024-35800" type="cve" title="CVE-2024-35800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35823" id="CVE-2024-35823" type="cve" title="CVE-2024-35823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35845" id="CVE-2024-35845" type="cve" title="CVE-2024-35845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35848" id="CVE-2024-35848" type="cve" title="CVE-2024-35848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35852" id="CVE-2024-35852" type="cve" title="CVE-2024-35852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35899" id="CVE-2024-35899" type="cve" title="CVE-2024-35899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35911" id="CVE-2024-35911" type="cve" title="CVE-2024-35911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35937" id="CVE-2024-35937" type="cve" title="CVE-2024-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35969" id="CVE-2024-35969" type="cve" title="CVE-2024-35969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36005" id="CVE-2024-36005" type="cve" title="CVE-2024-36005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36017" id="CVE-2024-36017" type="cve" title="CVE-2024-36017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36020" id="CVE-2024-36020" type="cve" title="CVE-2024-36020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36489" id="CVE-2024-36489" type="cve" title="CVE-2024-36489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36903" id="CVE-2024-36903" type="cve" title="CVE-2024-36903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36921" id="CVE-2024-36921" type="cve" title="CVE-2024-36921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36922" id="CVE-2024-36922" type="cve" title="CVE-2024-36922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36929" id="CVE-2024-36929" type="cve" title="CVE-2024-36929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36941" id="CVE-2024-36941" type="cve" title="CVE-2024-36941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36971" id="CVE-2024-36971" type="cve" title="CVE-2024-36971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37353" id="CVE-2024-37353" type="cve" title="CVE-2024-37353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37356" id="CVE-2024-37356" type="cve" title="CVE-2024-37356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38391" id="CVE-2024-38391" type="cve" title="CVE-2024-38391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38558" id="CVE-2024-38558" type="cve" title="CVE-2024-38558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38575" id="CVE-2024-38575" type="cve" title="CVE-2024-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39487" id="CVE-2024-39487" type="cve" title="CVE-2024-39487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40928" id="CVE-2024-40928" type="cve" title="CVE-2024-40928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40954" id="CVE-2024-40954" type="cve" title="CVE-2024-40954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40958" id="CVE-2024-40958" type="cve" title="CVE-2024-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40961" id="CVE-2024-40961" type="cve" title="CVE-2024-40961"/>
      <reference href="https://bugzilla.redhat.com/2265838" id="2265838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273405" id="2273405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275600" id="2275600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275655" id="2275655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275715" id="2275715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275748" id="2275748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278380" id="2278380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278417" id="2278417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278429" id="2278429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278519" id="2278519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278989" id="2278989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281057" id="2281057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281097" id="2281097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281133" id="2281133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281190" id="2281190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281237" id="2281237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281257" id="2281257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281265" id="2281265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281272" id="2281272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281639" id="2281639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281667" id="2281667" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281821" id="2281821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281900" id="2281900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281949" id="2281949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282719" id="2282719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284400" id="2284400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284417" id="2284417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284474" id="2284474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284496" id="2284496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284511" id="2284511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284513" id="2284513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284543" id="2284543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292331" id="2292331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293208" id="2293208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293418" id="2293418" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293441" id="2293441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293657" id="2293657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293658" id="2293658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293686" id="2293686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293687" id="2293687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293688" id="2293688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297056" id="2297056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297512" id="2297512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297538" id="2297538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297542" id="2297542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297545" id="2297545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5363.html" id="ALSA-2024:5363" type="self" title="ALSA-2024:5363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.31.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">baef2419f2e4dff04a0c58830526c99ebf86081f9814841a6f30f6458ff6572b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5529</id>
    <title>Moderate: curl security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:31:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: HTTP/2 push headers memory-leak (CVE-2024-2398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5529" id="RHSA-2024:5529" type="rhsa" title="RHSA-2024:5529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2398" id="CVE-2024-2398" type="cve" title="CVE-2024-2398"/>
      <reference href="https://bugzilla.redhat.com/2270498" id="2270498" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5529.html" id="ALSA-2024:5529" type="self" title="ALSA-2024:5529"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="29.el9_4.1" epoch="0" arch="i686" src="curl-7.76.1-29.el9_4.1.src.rpm">
          <filename>libcurl-minimal-7.76.1-29.el9_4.1.i686.rpm</filename>
          <sum type="sha256">2a7e89ebad2ae969c38f176884fb0a866be3135b145c5a65bc7040a114c2a9b9</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="29.el9_4.1" epoch="0" arch="i686" src="curl-7.76.1-29.el9_4.1.src.rpm">
          <filename>libcurl-7.76.1-29.el9_4.1.i686.rpm</filename>
          <sum type="sha256">95b7d63c29cf2f1df1ea03b707e95fc06cabd02e5386ef6d015283313dbf2307</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5534</id>
    <title>Important: python-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:43:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-setuptools security update</summary>
    <description>The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5534" id="RHSA-2024:5534" type="rhsa" title="RHSA-2024:5534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5534.html" id="ALSA-2024:5534" type="self" title="ALSA-2024:5534"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-setuptools" version="53.0.0" release="12.el9_4.1" epoch="0" arch="noarch" src="python-setuptools-53.0.0-12.el9_4.1.src.rpm">
          <filename>python3-setuptools-53.0.0-12.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">7768fa628178ca13a658de8ec0f93304d6f68000fea6385ddf995b8b34c62c90</sum>
        </package>
        <package name="python3-setuptools-wheel" version="53.0.0" release="12.el9_4.1" epoch="0" arch="noarch" src="python-setuptools-53.0.0-12.el9_4.1.src.rpm">
          <filename>python3-setuptools-wheel-53.0.0-12.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">b168555b17be4c12bf2352be13c2dc479a75b72372615e003644351f4f8c9d11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5928</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-11-03 22:28:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581)
  * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)
  * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810)
  * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855)
  * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908)
  * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
  * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016)
  * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
  * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
  * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)
  * kernel: netfilter: validate user input for expected length (CVE-2024-35896)
  * kernel: netfilter: complete validation of user input (CVE-2024-35962)
  * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003)
  * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771)
  * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880)
  * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025)
  * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
  * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579)
  * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544)
  * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
  * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538)
  * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476)
  * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905)
  * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911)
  * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912)
  * kernel: mm/huge_memory: don&amp;#39;t unpoison huge_zero_folio (CVE-2024-40914)
  * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929)
  * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939)
  * kernel: wifi: iwlwifi: mvm: don&amp;#39;t read past the mfuart notifcation (CVE-2024-40941)
  * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)
  * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)
  * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
  * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
  * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
  * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041)
  * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076)
  * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110)
  * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5928" id="RHSA-2024:5928" type="rhsa" title="RHSA-2024:5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52771" id="CVE-2023-52771" type="cve" title="CVE-2023-52771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52880" id="CVE-2023-52880" type="cve" title="CVE-2023-52880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26581" id="CVE-2024-26581" type="cve" title="CVE-2024-26581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26668" id="CVE-2024-26668" type="cve" title="CVE-2024-26668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26810" id="CVE-2024-26810" type="cve" title="CVE-2024-26810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26855" id="CVE-2024-26855" type="cve" title="CVE-2024-26855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26908" id="CVE-2024-26908" type="cve" title="CVE-2024-26908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26925" id="CVE-2024-26925" type="cve" title="CVE-2024-26925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27016" id="CVE-2024-27016" type="cve" title="CVE-2024-27016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27019" id="CVE-2024-27019" type="cve" title="CVE-2024-27019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27020" id="CVE-2024-27020" type="cve" title="CVE-2024-27020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27415" id="CVE-2024-27415" type="cve" title="CVE-2024-27415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35839" id="CVE-2024-35839" type="cve" title="CVE-2024-35839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35896" id="CVE-2024-35896" type="cve" title="CVE-2024-35896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35897" id="CVE-2024-35897" type="cve" title="CVE-2024-35897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35898" id="CVE-2024-35898" type="cve" title="CVE-2024-35898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35962" id="CVE-2024-35962" type="cve" title="CVE-2024-35962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36003" id="CVE-2024-36003" type="cve" title="CVE-2024-36003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36025" id="CVE-2024-36025" type="cve" title="CVE-2024-36025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38538" id="CVE-2024-38538" type="cve" title="CVE-2024-38538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38540" id="CVE-2024-38540" type="cve" title="CVE-2024-38540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38544" id="CVE-2024-38544" type="cve" title="CVE-2024-38544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38579" id="CVE-2024-38579" type="cve" title="CVE-2024-38579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38608" id="CVE-2024-38608" type="cve" title="CVE-2024-38608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39476" id="CVE-2024-39476" type="cve" title="CVE-2024-39476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40905" id="CVE-2024-40905" type="cve" title="CVE-2024-40905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40911" id="CVE-2024-40911" type="cve" title="CVE-2024-40911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40912" id="CVE-2024-40912" type="cve" title="CVE-2024-40912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40914" id="CVE-2024-40914" type="cve" title="CVE-2024-40914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40929" id="CVE-2024-40929" type="cve" title="CVE-2024-40929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40939" id="CVE-2024-40939" type="cve" title="CVE-2024-40939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40941" id="CVE-2024-40941" type="cve" title="CVE-2024-40941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40957" id="CVE-2024-40957" type="cve" title="CVE-2024-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40978" id="CVE-2024-40978" type="cve" title="CVE-2024-40978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40983" id="CVE-2024-40983" type="cve" title="CVE-2024-40983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41041" id="CVE-2024-41041" type="cve" title="CVE-2024-41041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41076" id="CVE-2024-41076" type="cve" title="CVE-2024-41076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41090" id="CVE-2024-41090" type="cve" title="CVE-2024-41090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41091" id="CVE-2024-41091" type="cve" title="CVE-2024-41091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42110" id="CVE-2024-42110" type="cve" title="CVE-2024-42110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42152" id="CVE-2024-42152" type="cve" title="CVE-2024-42152"/>
      <reference href="https://bugzilla.redhat.com/2265185" id="2265185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272797" id="2272797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273654" id="2273654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275742" id="2275742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275744" id="2275744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277166" id="2277166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278256" id="2278256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278258" id="2278258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278264" id="2278264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281101" id="2281101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281284" id="2281284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281669" id="2281669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281672" id="2281672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281675" id="2281675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281916" id="2281916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281958" id="2281958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282720" id="2282720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283468" id="2283468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284421" id="2284421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293356" id="2293356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293414" id="2293414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293455" id="2293455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293459" id="2293459" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293461" id="2293461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295914" id="2295914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297489" id="2297489" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297495" id="2297495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297496" id="2297496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297498" id="2297498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297513" id="2297513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297523" id="2297523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297525" id="2297525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297541" id="2297541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297562" id="2297562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297567" id="2297567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299240" id="2299240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299336" id="2299336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300410" id="2300410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300453" id="2300453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301473" id="2301473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301519" id="2301519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5928.html" id="ALSA-2024:5928" type="self" title="ALSA-2024:5928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.33.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">199f388382579d1778abdf96c5da608ba75ecdb6c4193f166420b32a33728676</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6162</id>
    <title>Moderate: python-urllib3 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 13:27:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.

Security Fix(es):

* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6162" id="RHSA-2024:6162" type="rhsa" title="RHSA-2024:6162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6162.html" id="ALSA-2024:6162" type="self" title="ALSA-2024:6162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-urllib3" version="1.26.5" release="5.el9_4.1" epoch="0" arch="noarch" src="python-urllib3-1.26.5-5.el9_4.1.src.rpm">
          <filename>python3-urllib3-1.26.5-5.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">87417c04ea939cd6258c6cec2c2d2f328c44e7866518477f66c33c00134edb51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6163</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:28:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6163" id="RHSA-2024:6163" type="rhsa" title="RHSA-2024:6163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6163.html" id="ALSA-2024:6163" type="self" title="ALSA-2024:6163"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3" version="3.9.18" release="3.el9_4.5" epoch="0" arch="i686" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-3.9.18-3.el9_4.5.i686.rpm</filename>
          <sum type="sha256">26b14baae5de11d6e5d9e3ba30ddd965964993b53b30413727f637ac9a6488c7</sum>
        </package>
        <package name="python3-libs" version="3.9.18" release="3.el9_4.5" epoch="0" arch="i686" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-libs-3.9.18-3.el9_4.5.i686.rpm</filename>
          <sum type="sha256">96c885e457eb0a9c1760fa72e01e8f7b1f52862ce55564f2423e44a4c9781318</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6166</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:26:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: GSS message token handling (CVE-2024-37371)
* krb5: GSS message token handling (CVE-2024-37370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6166" id="RHSA-2024:6166" type="rhsa" title="RHSA-2024:6166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37370" id="CVE-2024-37370" type="cve" title="CVE-2024-37370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37371" id="CVE-2024-37371" type="cve" title="CVE-2024-37371"/>
      <reference href="https://bugzilla.redhat.com/2294676" id="2294676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294677" id="2294677" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6166.html" id="ALSA-2024:6166" type="self" title="ALSA-2024:6166"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="krb5-libs" version="1.21.1" release="2.el9_4" epoch="0" arch="i686" src="krb5-1.21.1-2.el9_4.src.rpm">
          <filename>krb5-libs-1.21.1-2.el9_4.i686.rpm</filename>
          <sum type="sha256">710e3ff78fa43b2b60d63418cf49982509e65a879eeaaea1fc701d3aca4881bb</sum>
        </package>
        <package name="libkadm5" version="1.21.1" release="2.el9_4" epoch="0" arch="i686" src="krb5-1.21.1-2.el9_4.src.rpm">
          <filename>libkadm5-1.21.1-2.el9_4.i686.rpm</filename>
          <sum type="sha256">97c69b44008c706db78b27b5efdd7857d626ed7f7c197ebb0edf4a522eb4a837</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="2.el9_4" epoch="0" arch="i686" src="krb5-1.21.1-2.el9_4.src.rpm">
          <filename>krb5-server-1.21.1-2.el9_4.i686.rpm</filename>
          <sum type="sha256">a8ab639fc573cca9004e1147f7f9fde07ca15825d1e83e219a815896b07d4e09</sum>
        </package>
        <package name="krb5-pkinit" version="1.21.1" release="2.el9_4" epoch="0" arch="i686" src="krb5-1.21.1-2.el9_4.src.rpm">
          <filename>krb5-pkinit-1.21.1-2.el9_4.i686.rpm</filename>
          <sum type="sha256">d347cf50dad7d812039ddee97c4a8d56713b3a3abf507c27e5c555220a047543</sum>
        </package>
        <package name="krb5-server-ldap" version="1.21.1" release="2.el9_4" epoch="0" arch="i686" src="krb5-1.21.1-2.el9_4.src.rpm">
          <filename>krb5-server-ldap-1.21.1-2.el9_4.i686.rpm</filename>
          <sum type="sha256">f81b2bf24e2ad4db9c8c4c4636af6c2f49fbc4477a5aad360660004a0fc37004</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6464</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2024-09-09 00:00:00"/>
    <updated date="2024-09-10 06:20:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib2: Signal subscription vulnerabilities (CVE-2024-34397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6464" id="RHSA-2024:6464" type="rhsa" title="RHSA-2024:6464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397"/>
      <reference href="https://bugzilla.redhat.com/2279632" id="2279632" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6464.html" id="ALSA-2024:6464" type="self" title="ALSA-2024:6464"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="glib2" version="2.68.4" release="14.el9_4.1" epoch="0" arch="i686" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-2.68.4-14.el9_4.1.i686.rpm</filename>
          <sum type="sha256">e651d60f1906415554e34e21ce414b7eea9f8bd0316ca8a320a6d9da98b2a44d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6567</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-09-11 00:00:00"/>
    <updated date="2024-11-03 22:31:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629)
  * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630)
  * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)
  * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886)
  * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946)
  * kernel: KVM: SVM: Flush pages under kvm-&amp;gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791)
  * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797)
  * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875)
  * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
  * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801)
  * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883)
  * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019)
  * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619)
  * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979)
  * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559)
  * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927)
  * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936)
  * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040)
  * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044)
  * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055)
  * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096)
  * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082)
  * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096)
  * kernel: Revert &amp;#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&amp;#34; (CVE-2024-42102)
  * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131)
  * kernel: nvme: avoid double free special payload (CVE-2024-41073)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6567" id="RHSA-2024:6567" type="rhsa" title="RHSA-2024:6567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52463" id="CVE-2023-52463" type="cve" title="CVE-2023-52463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52801" id="CVE-2023-52801" type="cve" title="CVE-2023-52801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26629" id="CVE-2024-26629" type="cve" title="CVE-2024-26629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26630" id="CVE-2024-26630" type="cve" title="CVE-2024-26630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26720" id="CVE-2024-26720" type="cve" title="CVE-2024-26720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26886" id="CVE-2024-26886" type="cve" title="CVE-2024-26886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26946" id="CVE-2024-26946" type="cve" title="CVE-2024-26946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35791" id="CVE-2024-35791" type="cve" title="CVE-2024-35791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35797" id="CVE-2024-35797" type="cve" title="CVE-2024-35797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35875" id="CVE-2024-35875" type="cve" title="CVE-2024-35875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36000" id="CVE-2024-36000" type="cve" title="CVE-2024-36000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36019" id="CVE-2024-36019" type="cve" title="CVE-2024-36019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36883" id="CVE-2024-36883" type="cve" title="CVE-2024-36883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36979" id="CVE-2024-36979" type="cve" title="CVE-2024-36979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38559" id="CVE-2024-38559" type="cve" title="CVE-2024-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38619" id="CVE-2024-38619" type="cve" title="CVE-2024-38619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40927" id="CVE-2024-40927" type="cve" title="CVE-2024-40927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40936" id="CVE-2024-40936" type="cve" title="CVE-2024-40936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41040" id="CVE-2024-41040" type="cve" title="CVE-2024-41040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41044" id="CVE-2024-41044" type="cve" title="CVE-2024-41044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41055" id="CVE-2024-41055" type="cve" title="CVE-2024-41055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41073" id="CVE-2024-41073" type="cve" title="CVE-2024-41073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41096" id="CVE-2024-41096" type="cve" title="CVE-2024-41096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42082" id="CVE-2024-42082" type="cve" title="CVE-2024-42082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42096" id="CVE-2024-42096" type="cve" title="CVE-2024-42096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42102" id="CVE-2024-42102" type="cve" title="CVE-2024-42102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42131" id="CVE-2024-42131" type="cve" title="CVE-2024-42131"/>
      <reference href="https://bugzilla.redhat.com/2265797" id="2265797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269434" id="2269434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269436" id="2269436" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273141" id="2273141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275678" id="2275678" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278206" id="2278206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281052" id="2281052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281151" id="2281151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281727" id="2281727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281968" id="2281968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282709" id="2282709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284271" id="2284271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284402" id="2284402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293273" id="2293273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293276" id="2293276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293440" id="2293440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297511" id="2297511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297520" id="2297520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300409" id="2300409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300414" id="2300414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300429" id="2300429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300491" id="2300491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300520" id="2300520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300713" id="2300713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301465" id="2301465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301496" id="2301496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301637" id="2301637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6567.html" id="ALSA-2024:6567" type="self" title="ALSA-2024:6567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.35.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">b8c108f7b59a724b27fbd686b92ddce3161ff1b870ea895a1cda51a7299eefc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6754</id>
    <title>Moderate: expat security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-19 07:30:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490)
* libexpat: Integer Overflow or Wraparound (CVE-2024-45491)
* libexpat: integer overflow (CVE-2024-45492)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6754" id="RHSA-2024:6754" type="rhsa" title="RHSA-2024:6754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45490" id="CVE-2024-45490" type="cve" title="CVE-2024-45490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45491" id="CVE-2024-45491" type="cve" title="CVE-2024-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45492" id="CVE-2024-45492" type="cve" title="CVE-2024-45492"/>
      <reference href="https://bugzilla.redhat.com/2308615" id="2308615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2308616" id="2308616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2308617" id="2308617" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6754.html" id="ALSA-2024:6754" type="self" title="ALSA-2024:6754"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="expat" version="2.5.0" release="2.el9_4.1" epoch="0" arch="i686" src="expat-2.5.0-2.el9_4.1.src.rpm">
          <filename>expat-2.5.0-2.el9_4.1.i686.rpm</filename>
          <sum type="sha256">0f5b667891dc53a5374c8110af3b994ff54ec824df762369934175acd93b29fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6783</id>
    <title>Moderate: openssl security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-19 07:29:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6783" id="RHSA-2024:6783" type="rhsa" title="RHSA-2024:6783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6119" id="CVE-2024-6119" type="cve" title="CVE-2024-6119"/>
      <reference href="https://bugzilla.redhat.com/2306158" id="2306158" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6783.html" id="ALSA-2024:6783" type="self" title="ALSA-2024:6783"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="openssl-libs" version="3.0.7" release="28.el9_4" epoch="1" arch="i686" src="openssl-3.0.7-28.el9_4.src.rpm">
          <filename>openssl-libs-3.0.7-28.el9_4.i686.rpm</filename>
          <sum type="sha256">abf51062d5ab15621ea7fac738af4249c8d79c7ca48f81fde32dab5e1b116bca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6997</id>
    <title>Important: kernel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-11-03 22:34:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739)
  * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947)
  * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931)
  * kernel: scsi: qla2xxx: Fix double free of the ha-&amp;gt;vp_map pointer (CVE-2024-26930)
  * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929)
  * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022)
  * kernel: KVM: x86/mmu: x86: Don&amp;#39;t overflow lpage_info when checking attributes (CVE-2024-26991)
  * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895)
  * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016)
  * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)
  * kernel: cpufreq: exit() callback is optional (CVE-2024-38615)
  * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601)
  * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573)
  * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570)
  * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562)
  * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884)
  * kernel: ACPICA: Revert &amp;#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&amp;#34; (CVE-2024-40984)
  * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071)
  * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225)
  * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6997" id="RHSA-2024:6997" type="rhsa" title="RHSA-2024:6997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52439" id="CVE-2023-52439" type="cve" title="CVE-2023-52439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52884" id="CVE-2023-52884" type="cve" title="CVE-2023-52884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26739" id="CVE-2024-26739" type="cve" title="CVE-2024-26739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26929" id="CVE-2024-26929" type="cve" title="CVE-2024-26929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26930" id="CVE-2024-26930" type="cve" title="CVE-2024-26930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26931" id="CVE-2024-26931" type="cve" title="CVE-2024-26931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26947" id="CVE-2024-26947" type="cve" title="CVE-2024-26947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26991" id="CVE-2024-26991" type="cve" title="CVE-2024-26991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27022" id="CVE-2024-27022" type="cve" title="CVE-2024-27022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35895" id="CVE-2024-35895" type="cve" title="CVE-2024-35895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36016" id="CVE-2024-36016" type="cve" title="CVE-2024-36016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36899" id="CVE-2024-36899" type="cve" title="CVE-2024-36899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38562" id="CVE-2024-38562" type="cve" title="CVE-2024-38562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38570" id="CVE-2024-38570" type="cve" title="CVE-2024-38570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38573" id="CVE-2024-38573" type="cve" title="CVE-2024-38573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38601" id="CVE-2024-38601" type="cve" title="CVE-2024-38601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38615" id="CVE-2024-38615" type="cve" title="CVE-2024-38615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40984" id="CVE-2024-40984" type="cve" title="CVE-2024-40984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41071" id="CVE-2024-41071" type="cve" title="CVE-2024-41071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42225" id="CVE-2024-42225" type="cve" title="CVE-2024-42225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42246" id="CVE-2024-42246" type="cve" title="CVE-2024-42246"/>
      <reference href="https://bugzilla.redhat.com/2265271" id="2265271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273270" id="2273270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278167" id="2278167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278245" id="2278245" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278248" id="2278248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278250" id="2278250" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278252" id="2278252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278318" id="2278318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281677" id="2281677" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283894" id="2283894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284549" id="2284549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293348" id="2293348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293364" id="2293364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293420" id="2293420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293423" id="2293423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293431" id="2293431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293685" id="2293685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297568" id="2297568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300448" id="2300448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301543" id="2301543" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6997.html" id="ALSA-2024:6997" type="self" title="ALSA-2024:6997"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.37.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">daa207841f02d9dd6c1c040ca4cd33800f4c843c86061895d5c9b005318afc85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7484</id>
    <title>Moderate: linux-firmware security update</title>
    <issued date="2024-10-02 00:00:00"/>
    <updated date="2024-10-03 13:02:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>linux-firmware security update</summary>
    <description>The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584)
* kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7484" id="RHSA-2024:7484" type="rhsa" title="RHSA-2024:7484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20584" id="CVE-2023-20584" type="cve" title="CVE-2023-20584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31356" id="CVE-2023-31356" type="cve" title="CVE-2023-31356"/>
      <reference href="https://bugzilla.redhat.com/2304583" id="2304583" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2304593" id="2304593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7484.html" id="ALSA-2024:7484" type="self" title="ALSA-2024:7484"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="iwl6000g2a-firmware" version="18.168.6.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl6000g2a-firmware-18.168.6.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">03388ed2705c49d3944f25fd82554355a9d8e18439ab61d5a928be6f1d9bb647</sum>
        </package>
        <package name="iwl2000-firmware" version="18.168.6.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl2000-firmware-18.168.6.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">0430121006fec4e2e49e6369eccbe17cb36f0f9caa8b4cc3b3e3a6df8aec11a9</sum>
        </package>
        <package name="iwl105-firmware" version="18.168.6.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl105-firmware-18.168.6.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">25dadeb4bc3387c82347955e9575f2798e82bf80642732c5fc494ef04b331e10</sum>
        </package>
        <package name="iwl7260-firmware" version="25.30.13.0" release="143.3.el9_4" epoch="1" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl7260-firmware-25.30.13.0-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">263f5643a8578010a11d6f6816be9fb70a2cfedc0c30f98c59dfdf86d486f24c</sum>
        </package>
        <package name="iwl1000-firmware" version="39.31.5.1" release="143.3.el9_4" epoch="1" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl1000-firmware-39.31.5.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">2c6065a0665bd2bfd65a851b68c9d50eb017bc5cfb46b4cd6e8020179dc0ef4f</sum>
        </package>
        <package name="iwl3160-firmware" version="25.30.13.0" release="143.3.el9_4" epoch="1" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl3160-firmware-25.30.13.0-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">46bd49ebd60c9e1def27ea4d67cb941f9b719824473a2dc15fd35f3012d164a2</sum>
        </package>
        <package name="iwl5000-firmware" version="8.83.5.1_1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl5000-firmware-8.83.5.1_1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">5b1409bae5937a56c9e6141641852908d20036b2fbf5cf1636949c6106210735</sum>
        </package>
        <package name="linux-firmware-whence" version="20240905" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>linux-firmware-whence-20240905-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">6ab4e85d882307d5331a55d3bddeb192c32406e92fe51769f588c1edaa66a762</sum>
        </package>
        <package name="iwl5150-firmware" version="8.24.2.2" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl5150-firmware-8.24.2.2-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">a855365eae209cc93f76a272eaffd066ae13a87909af9730acab12c16984868f</sum>
        </package>
        <package name="iwl2030-firmware" version="18.168.6.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl2030-firmware-18.168.6.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">acb5dcba83e08ab4fb0cce30a5b9d91635ca01f06659ae6264b06dbea3b4586e</sum>
        </package>
        <package name="iwl6050-firmware" version="41.28.5.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl6050-firmware-41.28.5.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">b35cb88a9417938a6d17f6d14b4fb660eaaaba9b1535bf38fb85900e81c2208f</sum>
        </package>
        <package name="libertas-sd8787-firmware" version="20240905" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>libertas-sd8787-firmware-20240905-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">b458ed7d0a2d2ce1e2cf6e156aae13bfddf2b28eb6f705e0131efdcdb0ae3029</sum>
        </package>
        <package name="iwl6000g2b-firmware" version="18.168.6.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl6000g2b-firmware-18.168.6.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">c1574bfe2dfaf060f07d936a1e043ef33ec0feb76a6e4ed408aa0c5527ef70bc</sum>
        </package>
        <package name="netronome-firmware" version="20240905" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>netronome-firmware-20240905-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">c2e95a533ae5194e5d1988a15453be836d8f067ebea3e9087bb624a9f6076b7e</sum>
        </package>
        <package name="linux-firmware" version="20240905" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>linux-firmware-20240905-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">cf9ce8fbb000919c5c231772aed74595378a28a5a80b8130637ed9aaf7d07d3d</sum>
        </package>
        <package name="iwl100-firmware" version="39.31.5.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl100-firmware-39.31.5.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">e35811f39878a84e054efa5e2c265063e08a7d58f02b00ece15ce5a2d021ea77</sum>
        </package>
        <package name="iwl135-firmware" version="18.168.6.1" release="143.3.el9_4" epoch="0" arch="noarch" src="linux-firmware-20240905-143.3.el9_4.src.rpm">
          <filename>iwl135-firmware-18.168.6.1-143.3.el9_4.noarch.rpm</filename>
          <sum type="sha256">f7c04cb833b4ee5c62b2f5ec3feedbd3e1159230d92c54c1f6b11023fd158334</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8162</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-25 06:30:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
  * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)
  * kernel: Revert &amp;#34;net/mlx5: Block entering switchdev mode with ns inconsistency&amp;#34; (CVE-2023-52658)
  * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989)
  * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385)
  * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)
  * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)
  * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556)
  * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483)
  * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)
  * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959)
  * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)
  * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272)
  * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8162" id="RHSA-2024:8162" type="rhsa" title="RHSA-2024:8162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47385" id="CVE-2021-47385" type="cve" title="CVE-2021-47385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52658" id="CVE-2023-52658" type="cve" title="CVE-2023-52658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27403" id="CVE-2024-27403" type="cve" title="CVE-2024-27403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35989" id="CVE-2024-35989" type="cve" title="CVE-2024-35989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36889" id="CVE-2024-36889" type="cve" title="CVE-2024-36889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36978" id="CVE-2024-36978" type="cve" title="CVE-2024-36978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38556" id="CVE-2024-38556" type="cve" title="CVE-2024-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39483" id="CVE-2024-39483" type="cve" title="CVE-2024-39483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39502" id="CVE-2024-39502" type="cve" title="CVE-2024-39502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40959" id="CVE-2024-40959" type="cve" title="CVE-2024-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42079" id="CVE-2024-42079" type="cve" title="CVE-2024-42079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42272" id="CVE-2024-42272" type="cve" title="CVE-2024-42272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42284" id="CVE-2024-42284" type="cve" title="CVE-2024-42284"/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281127" id="2281127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281149" id="2281149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281847" id="2281847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282355" id="2282355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284571" id="2284571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293078" id="2293078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293443" id="2293443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295921" id="2295921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297474" id="2297474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297543" id="2297543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300517" id="2300517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8162.html" id="ALSA-2024:8162" type="self" title="ALSA-2024:8162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.40.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">c55893247457a92a3ac101b685fb7631d73b5dbe5a06a66cb6e4e17f1ac393e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8446</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-10-24 00:00:00"/>
    <updated date="2024-10-24 22:22:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8446" id="RHSA-2024:8446" type="rhsa" title="RHSA-2024:8446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8446.html" id="ALSA-2024:8446" type="self" title="ALSA-2024:8446"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-libs" version="3.9.18" release="3.el9_4.6" epoch="0" arch="i686" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-libs-3.9.18-3.el9_4.6.i686.rpm</filename>
          <sum type="sha256">be0ac44db7de55b76f9b1b79c8049efdfb0d9e9c933dc04b421c08c700f99ed1</sum>
        </package>
        <package name="python3" version="3.9.18" release="3.el9_4.6" epoch="0" arch="i686" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-3.9.18-3.el9_4.6.i686.rpm</filename>
          <sum type="sha256">d67aca11603940bd5ab100e10e8ad6d22e08c6ed75c5445f55b0c51c0f891b76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-30 00:00:00"/>
    <updated date="2024-11-03 19:17:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)
  * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
  * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
  * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)
  * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
  * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)
  * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)
  * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)
  * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)
  * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)
  * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)
  * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)
  * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)
  * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)
  * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)
  * kernel: ext4: fix uninitialized ratelimit_state-&amp;gt;lock access in __ext4_fill_super() (CVE-2024-40998)
  * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)
  * kernel: xfs: don&amp;#39;t walk off the end of a directory data block (CVE-2024-41013)
  * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8617" id="RHSA-2024:8617" type="rhsa" title="RHSA-2024:8617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47383" id="CVE-2021-47383" type="cve" title="CVE-2021-47383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2201" id="CVE-2024-2201" type="cve" title="CVE-2024-2201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26640" id="CVE-2024-26640" type="cve" title="CVE-2024-26640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26826" id="CVE-2024-26826" type="cve" title="CVE-2024-26826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26923" id="CVE-2024-26923" type="cve" title="CVE-2024-26923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26935" id="CVE-2024-26935" type="cve" title="CVE-2024-26935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26961" id="CVE-2024-26961" type="cve" title="CVE-2024-26961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36244" id="CVE-2024-36244" type="cve" title="CVE-2024-36244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39472" id="CVE-2024-39472" type="cve" title="CVE-2024-39472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39504" id="CVE-2024-39504" type="cve" title="CVE-2024-39504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40904" id="CVE-2024-40904" type="cve" title="CVE-2024-40904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40931" id="CVE-2024-40931" type="cve" title="CVE-2024-40931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40960" id="CVE-2024-40960" type="cve" title="CVE-2024-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40972" id="CVE-2024-40972" type="cve" title="CVE-2024-40972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40977" id="CVE-2024-40977" type="cve" title="CVE-2024-40977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40995" id="CVE-2024-40995" type="cve" title="CVE-2024-40995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40998" id="CVE-2024-40998" type="cve" title="CVE-2024-40998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41005" id="CVE-2024-41005" type="cve" title="CVE-2024-41005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41013" id="CVE-2024-41013" type="cve" title="CVE-2024-41013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41014" id="CVE-2024-41014" type="cve" title="CVE-2024-41014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://bugzilla.redhat.com/2268118" id="2268118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270100" id="2270100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275604" id="2275604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277171" id="2277171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278176" id="2278176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278235" id="2278235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282357" id="2282357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293654" id="2293654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296067" id="2296067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297476" id="2297476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297488" id="2297488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297515" id="2297515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297544" id="2297544" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297556" id="2297556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297561" id="2297561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297579" id="2297579" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297582" id="2297582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297589" id="2297589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300296" id="2300296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300297" id="2300297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8617.html" id="ALSA-2024:8617" type="self" title="ALSA-2024:8617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-427.42.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">25ecf7e16caa649786886061c099b4299220ab823dd6745c059dee4a006c53e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9317</id>
    <title>Low: NetworkManager security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * NetworkManager: Denial of Service (CVE-2024-6501)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9317" id="RHSA-2024:9317" type="rhsa" title="RHSA-2024:9317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6501" id="CVE-2024-6501" type="cve" title="CVE-2024-6501"/>
      <reference href="https://bugzilla.redhat.com/2295734" id="2295734" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9317.html" id="ALSA-2024:9317" type="self" title="ALSA-2024:9317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="NetworkManager-initscripts-updown" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="noarch" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-initscripts-updown-1.48.10-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">1626d23f5e041576ad82b4b7726c7f8cee5a2c32c3f4383f86d59b047595e6de</sum>
        </package>
        <package name="NetworkManager-config-server" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="noarch" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-config-server-1.48.10-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">b01d15eb0c223ffc8d4ddfe82bc92fef4899c7a1d71db5b98ba471f82a0d2b56</sum>
        </package>
        <package name="NetworkManager-libnm" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="i686" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-libnm-1.48.10-2.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">ccc0536c9b3941bc56a4e53d47a3b3cd3161f33268ae3570efe8d34d3a7705bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9331</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 14:12:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c (CVE-2024-26458)
  * krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (CVE-2024-26461)
  * krb5: Memory leak at /krb5/src/kdc/ndr.c (CVE-2024-26462)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9331" id="RHSA-2024:9331" type="rhsa" title="RHSA-2024:9331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26458" id="CVE-2024-26458" type="cve" title="CVE-2024-26458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26461" id="CVE-2024-26461" type="cve" title="CVE-2024-26461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26462" id="CVE-2024-26462" type="cve" title="CVE-2024-26462"/>
      <reference href="https://bugzilla.redhat.com/2266731" id="2266731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266740" id="2266740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266742" id="2266742" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9331.html" id="ALSA-2024:9331" type="self" title="ALSA-2024:9331"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="krb5-libs" version="1.21.1" release="3.el9" epoch="0" arch="i686" src="krb5-1.21.1-3.el9.src.rpm">
          <filename>krb5-libs-1.21.1-3.el9.i686.rpm</filename>
          <sum type="sha256">1cf5bed811eba1d651d5794cae1c428142d23f919a2c261ed717b2536b4e104e</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="3.el9" epoch="0" arch="i686" src="krb5-1.21.1-3.el9.src.rpm">
          <filename>krb5-server-1.21.1-3.el9.i686.rpm</filename>
          <sum type="sha256">3e9e0910b434b605c6b132803b190c72428f5c2adaac803471d1ce77e9fbf65e</sum>
        </package>
        <package name="krb5-pkinit" version="1.21.1" release="3.el9" epoch="0" arch="i686" src="krb5-1.21.1-3.el9.src.rpm">
          <filename>krb5-pkinit-1.21.1-3.el9.i686.rpm</filename>
          <sum type="sha256">938086c9080283840b870d4ea1996b48bc22a28f8236c87a62c640d15a78f8b6</sum>
        </package>
        <package name="krb5-server-ldap" version="1.21.1" release="3.el9" epoch="0" arch="i686" src="krb5-1.21.1-3.el9.src.rpm">
          <filename>krb5-server-ldap-1.21.1-3.el9.i686.rpm</filename>
          <sum type="sha256">b4b69bef69ebd230f848c52ca9b221f129c58fb7430502333bcb0ab3a6cb5337</sum>
        </package>
        <package name="libkadm5" version="1.21.1" release="3.el9" epoch="0" arch="i686" src="krb5-1.21.1-3.el9.src.rpm">
          <filename>libkadm5-1.21.1-3.el9.i686.rpm</filename>
          <sum type="sha256">f3626feda9f911b92bb14ae78bc4a3c62f16380f47eec2c4f83c66c342581afd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9333</id>
    <title>Low: openssl security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-20 06:02:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)
  * openssl: Excessive time spent checking DSA keys and parameters (CVE-2024-4603)
  * openssl: Use After Free with SSL_free_buffers (CVE-2024-4741)
  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9333" id="RHSA-2024:9333" type="rhsa" title="RHSA-2024:9333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2511" id="CVE-2024-2511" type="cve" title="CVE-2024-2511"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4603" id="CVE-2024-4603" type="cve" title="CVE-2024-4603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4741" id="CVE-2024-4741" type="cve" title="CVE-2024-4741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5535" id="CVE-2024-5535" type="cve" title="CVE-2024-5535"/>
      <reference href="https://bugzilla.redhat.com/2274020" id="2274020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281029" id="2281029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283757" id="2283757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294581" id="2294581" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9333.html" id="ALSA-2024:9333" type="self" title="ALSA-2024:9333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="openssl-libs" version="3.2.2" release="6.el9_5" epoch="1" arch="i686" src="openssl-3.2.2-6.el9_5.src.rpm">
          <filename>openssl-libs-3.2.2-6.el9_5.i686.rpm</filename>
          <sum type="sha256">df4ede3753246453c095d79528b522594795a6d489f556b49c74f90c0deb2705</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9371</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 14:09:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9371" id="RHSA-2024:9371" type="rhsa" title="RHSA-2024:9371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9371.html" id="ALSA-2024:9371" type="self" title="ALSA-2024:9371"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-libs" version="3.9.19" release="8.el9" epoch="0" arch="i686" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python3-libs-3.9.19-8.el9.i686.rpm</filename>
          <sum type="sha256">0e6905e409093f6abaa15b5cacc493c6a0609e4cdb052323e3685e5942dd5f4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9401</id>
    <title>Moderate: microcode_ctl security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>microcode_ctl security update</summary>
    <description>The microcode_ctl packages provide microcode updates for Intel and AMD processors.  

Security Fix(es):  

  * kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)
  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
  * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)
  * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)
  * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)
  * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)
  * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9401" id="RHSA-2024:9401" type="rhsa" title="RHSA-2024:9401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22655" id="CVE-2023-22655" type="cve" title="CVE-2023-22655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38575" id="CVE-2023-38575" type="cve" title="CVE-2023-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39368" id="CVE-2023-39368" type="cve" title="CVE-2023-39368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43490" id="CVE-2023-43490" type="cve" title="CVE-2023-43490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45733" id="CVE-2023-45733" type="cve" title="CVE-2023-45733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46103" id="CVE-2023-46103" type="cve" title="CVE-2023-46103"/>
      <reference href="https://bugzilla.redhat.com/2270698" id="2270698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270701" id="2270701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270703" id="2270703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270704" id="2270704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292296" id="2292296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292300" id="2292300" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9401.html" id="ALSA-2024:9401" type="self" title="ALSA-2024:9401"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="microcode_ctl" version="20240910" release="1.el9_5" epoch="4" arch="noarch" src="microcode_ctl-20240910-1.el9_5.src.rpm">
          <filename>microcode_ctl-20240910-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">8c62be3b9b3b71c9b4cfda517ca9f93f184cb644316a144729859fd6193216a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9404</id>
    <title>Moderate: libgcrypt security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libgcrypt security update</summary>
    <description>The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.  

Security Fix(es):  

  * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9404" id="RHSA-2024:9404" type="rhsa" title="RHSA-2024:9404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2236" id="CVE-2024-2236" type="cve" title="CVE-2024-2236"/>
      <reference href="https://bugzilla.redhat.com/2245218" id="2245218" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9404.html" id="ALSA-2024:9404" type="self" title="ALSA-2024:9404"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="libgcrypt" version="1.10.0" release="11.el9" epoch="0" arch="i686" src="libgcrypt-1.10.0-11.el9.src.rpm">
          <filename>libgcrypt-1.10.0-11.el9.i686.rpm</filename>
          <sum type="sha256">80f5c7359a929c68c4ba38c87a6a358069fe04d4bb418499a2fe0602cfded595</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9405</id>
    <title>Low: vim security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: heap-based buffer overflow vulnerability (CVE-2021-3903)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9405" id="RHSA-2024:9405" type="rhsa" title="RHSA-2024:9405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3903" id="CVE-2021-3903" type="cve" title="CVE-2021-3903"/>
      <reference href="https://bugzilla.redhat.com/2018558" id="2018558" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9405.html" id="ALSA-2024:9405" type="self" title="ALSA-2024:9405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="21.el9" epoch="2" arch="noarch" src="vim-8.2.2637-21.el9.src.rpm">
          <filename>vim-filesystem-8.2.2637-21.el9.noarch.rpm</filename>
          <sum type="sha256">5d7edeecf4d5942a0a2a135bc67f4a681d7125f838be60bfc77b3aa09f1e4c20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9413</id>
    <title>Moderate: bluez security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)
  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)
  * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)
  * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)
  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)
  * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)
  * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9413" id="RHSA-2024:9413" type="rhsa" title="RHSA-2024:9413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44431" id="CVE-2023-44431" type="cve" title="CVE-2023-44431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50229" id="CVE-2023-50229" type="cve" title="CVE-2023-50229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50230" id="CVE-2023-50230" type="cve" title="CVE-2023-50230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51580" id="CVE-2023-51580" type="cve" title="CVE-2023-51580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51592" id="CVE-2023-51592" type="cve" title="CVE-2023-51592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51594" id="CVE-2023-51594" type="cve" title="CVE-2023-51594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51596" id="CVE-2023-51596" type="cve" title="CVE-2023-51596"/>
      <reference href="https://bugzilla.redhat.com/2253391" id="2253391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278787" id="2278787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278945" id="2278945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278955" id="2278955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278962" id="2278962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278965" id="2278965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278967" id="2278967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278969" id="2278969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278972" id="2278972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278974" id="2278974" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9413.html" id="ALSA-2024:9413" type="self" title="ALSA-2024:9413"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="bluez-libs" version="5.72" release="2.el9" epoch="0" arch="i686" src="bluez-5.72-2.el9.src.rpm">
          <filename>bluez-libs-5.72-2.el9.i686.rpm</filename>
          <sum type="sha256">af1aba8e6fa5ccf33032d58a3acc59368c07d532293396db205fb9a4bc1241ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9423</id>
    <title>Moderate: python-dns security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-dns security update</summary>
    <description>The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.  

Security Fix(es):  

  * dnspython: denial of service in stub resolver (CVE-2023-29483)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9423" id="RHSA-2024:9423" type="rhsa" title="RHSA-2024:9423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29483" id="CVE-2023-29483" type="cve" title="CVE-2023-29483"/>
      <reference href="https://bugzilla.redhat.com/2274520" id="2274520" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9423.html" id="ALSA-2024:9423" type="self" title="ALSA-2024:9423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-dns" version="2.6.1" release="3.el9" epoch="0" arch="noarch" src="python-dns-2.6.1-3.el9.src.rpm">
          <filename>python3-dns-2.6.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">b0119d64551f2546511b878ac9aea12e3caf90ae97e450091c643fe02d410681</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9468</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9468" id="RHSA-2024:9468" type="rhsa" title="RHSA-2024:9468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9468.html" id="ALSA-2024:9468" type="self" title="ALSA-2024:9468"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="python3-libs" version="3.9.19" release="8.el9_5.1" epoch="0" arch="i686" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-libs-3.9.19-8.el9_5.1.i686.rpm</filename>
          <sum type="sha256">25c2fa392bccde0412711932835b06e6b98e5107f5049836da002688a2667da0</sum>
        </package>
        <package name="python3" version="3.9.19" release="8.el9_5.1" epoch="0" arch="i686" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-3.9.19-8.el9_5.1.i686.rpm</filename>
          <sum type="sha256">c2c798c6a71d49caeba6110cb9cf93edfbfb0de4266a1e27bf3f11e658840667</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9470</id>
    <title>Low: cups security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: libppd: remote command injection via attacker controlled data in PPD file ()


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9470" id="RHSA-2024:9470" type="rhsa" title="RHSA-2024:9470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9470.html" id="ALSA-2024:9470" type="self" title="ALSA-2024:9470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="cups-libs" version="2.3.3op2" release="31.el9_5" epoch="1" arch="i686" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-libs-2.3.3op2-31.el9_5.i686.rpm</filename>
          <sum type="sha256">36c4f34b0d7f6228ec41be43d00b77ae0e015a4b2fccc21fbe9bea335268bc69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9474</id>
    <title>Important: krb5 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:50:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * freeradius: forgery attack (CVE-2024-3596)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9474" id="RHSA-2024:9474" type="rhsa" title="RHSA-2024:9474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596"/>
      <reference href="https://bugzilla.redhat.com/2263240" id="2263240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9474.html" id="ALSA-2024:9474" type="self" title="ALSA-2024:9474"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="krb5-server-ldap" version="1.21.1" release="4.el9_5" epoch="0" arch="i686" src="krb5-1.21.1-4.el9_5.src.rpm">
          <filename>krb5-server-ldap-1.21.1-4.el9_5.i686.rpm</filename>
          <sum type="sha256">0be4150e2ecc917cdcf38f17eb4f0379bbcf10f0ace7e5b0bbfa82de3147600e</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="4.el9_5" epoch="0" arch="i686" src="krb5-1.21.1-4.el9_5.src.rpm">
          <filename>krb5-server-1.21.1-4.el9_5.i686.rpm</filename>
          <sum type="sha256">46aa398b110f920dc9ecdf7d0bbd922988ed09a004359db9f30ae13e974ac83a</sum>
        </package>
        <package name="krb5-libs" version="1.21.1" release="4.el9_5" epoch="0" arch="i686" src="krb5-1.21.1-4.el9_5.src.rpm">
          <filename>krb5-libs-1.21.1-4.el9_5.i686.rpm</filename>
          <sum type="sha256">7868900114ecb463d735081d958d2c402d7554b485f02a959248acba24e4f94a</sum>
        </package>
        <package name="krb5-pkinit" version="1.21.1" release="4.el9_5" epoch="0" arch="i686" src="krb5-1.21.1-4.el9_5.src.rpm">
          <filename>krb5-pkinit-1.21.1-4.el9_5.i686.rpm</filename>
          <sum type="sha256">839cb875caf3358663496102b1f4758a2f0b7917cae25fb2bb29db8d49733261</sum>
        </package>
        <package name="libkadm5" version="1.21.1" release="4.el9_5" epoch="0" arch="i686" src="krb5-1.21.1-4.el9_5.src.rpm">
          <filename>libkadm5-1.21.1-4.el9_5.i686.rpm</filename>
          <sum type="sha256">cc67e85afaa36e49f949b46742a8c0e90c45b4c9aa7136431ee0554f51937f37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9541</id>
    <title>Moderate: expat security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 11:47:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9541" id="RHSA-2024:9541" type="rhsa" title="RHSA-2024:9541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50602" id="CVE-2024-50602" type="cve" title="CVE-2024-50602"/>
      <reference href="https://bugzilla.redhat.com/2321987" id="2321987" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9541.html" id="ALSA-2024:9541" type="self" title="ALSA-2024:9541"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="expat" version="2.5.0" release="3.el9_5.1" epoch="0" arch="i686" src="expat-2.5.0-3.el9_5.1.src.rpm">
          <filename>expat-2.5.0-3.el9_5.1.i686.rpm</filename>
          <sum type="sha256">ed37991c964bebdd6c0f374db38d1f709e7e31b1009d6c89b5eb0a8f1494dfac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9605</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-20 15:31:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283)
  * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824)
  * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9605" id="RHSA-2024:9605" type="rhsa" title="RHSA-2024:9605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42283" id="CVE-2024-42283" type="cve" title="CVE-2024-42283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46824" id="CVE-2024-46824" type="cve" title="CVE-2024-46824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46858" id="CVE-2024-46858" type="cve" title="CVE-2024-46858"/>
      <reference href="https://bugzilla.redhat.com/2315176" id="2315176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315210" id="2315210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9605.html" id="ALSA-2024:9605" type="self" title="ALSA-2024:9605"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_4_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_4_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.14.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">f5b993e316afa8f22855e21014063a32f44ba30be95699e439215645db1b0c30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0059</id>
    <title>Important: kernel security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-13 20:08:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713)
  * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208)
  * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252)
  * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0059" id="RHSA-2025:0059" type="rhsa" title="RHSA-2025:0059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46713" id="CVE-2024-46713" type="cve" title="CVE-2024-46713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50208" id="CVE-2024-50208" type="cve" title="CVE-2024-50208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50252" id="CVE-2024-50252" type="cve" title="CVE-2024-50252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53122" id="CVE-2024-53122" type="cve" title="CVE-2024-53122"/>
      <reference href="https://bugzilla.redhat.com/2312221" id="2312221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324611" id="2324611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324898" id="2324898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329932" id="2329932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0059.html" id="ALSA-2025:0059" type="self" title="ALSA-2025:0059"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.21.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">2737be5a0989ad67b7a52f8f75885e5524d1e5a9c4d6d75cf5a8c8771a21bdcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0377</id>
    <title>Moderate: Security and bug fixes for NetworkManager</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:14:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Security and bug fixes for NetworkManager</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security and bug fix(es):  

  * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013)
  * Route to VPN server not stored in routing table that is specified by ipv4.route-table [almalinux-9.5.z] (JIRA:AlmaLinux-73166)
  * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167)
  * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [almalinux-9.5.z] (JIRA:AlmaLinux-64726)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0377" id="RHSA-2025:0377" type="rhsa" title="RHSA-2025:0377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0377.html" id="ALSA-2025:0377" type="self" title="ALSA-2025:0377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="NetworkManager-libnm" version="1.48.10" release="5.el9_5" epoch="1" arch="i686" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-libnm-1.48.10-5.el9_5.i686.rpm</filename>
          <sum type="sha256">9821994a5dfa774a46d2474885ee95026fe85601bd621a02cb639a917a2fc144</sum>
        </package>
        <package name="NetworkManager-initscripts-updown" version="1.48.10" release="5.el9_5" epoch="1" arch="noarch" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-initscripts-updown-1.48.10-5.el9_5.noarch.rpm</filename>
          <sum type="sha256">9b597d82ae0b0f2e47ede76215cd1df2f8a396ed6c843611cd2ebd8e4736459b</sum>
        </package>
        <package name="NetworkManager-config-server" version="1.48.10" release="5.el9_5" epoch="1" arch="noarch" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-config-server-1.48.10-5.el9_5.noarch.rpm</filename>
          <sum type="sha256">b095d35957b8bcbc61e35337fbc41de09f404df4b2660df88b35367110fb61ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0578</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-25 20:33:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: tcp/dccp: Don&amp;#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154)
  * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)
  * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0578" id="RHSA-2025:0578" type="rhsa" title="RHSA-2025:0578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50154" id="CVE-2024-50154" type="cve" title="CVE-2024-50154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50275" id="CVE-2024-50275" type="cve" title="CVE-2024-50275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53088" id="CVE-2024-53088" type="cve" title="CVE-2024-53088"/>
      <reference href="https://bugzilla.redhat.com/2324313" id="2324313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327198" id="2327198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327328" id="2327328" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0578.html" id="ALSA-2025:0578" type="self" title="ALSA-2025:0578"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.22.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">5f2061235111c2f40b83e82eae415449b633ff0d4185ee055d042cc56b0f8e53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0925</id>
    <title>Moderate: bzip2 security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:34:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bzip2 security update</summary>
    <description>The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs.   

Security Fix(es):  

  * bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0925" id="RHSA-2025:0925" type="rhsa" title="RHSA-2025:0925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-12900" id="CVE-2019-12900" type="cve" title="CVE-2019-12900"/>
      <reference href="https://bugzilla.redhat.com/2332075" id="2332075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0925.html" id="ALSA-2025:0925" type="self" title="ALSA-2025:0925"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="bzip2-libs" version="1.0.8" release="10.el9_5" epoch="0" arch="i686" src="bzip2-1.0.8-10.el9_5.src.rpm">
          <filename>bzip2-libs-1.0.8-10.el9_5.i686.rpm</filename>
          <sum type="sha256">3af3fd15c5f09a32259e24a43620ea3268ac4b8def77f502aec65343eac9d51d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10136</id>
    <title>Important: python3.9 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-02 06:46:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10136" id="RHSA-2025:10136" type="rhsa" title="RHSA-2025:10136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10136.html" id="ALSA-2025:10136" type="self" title="ALSA-2025:10136"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="python3-libs" version="3.9.21" release="2.el9_6.1" epoch="0" arch="i686" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-libs-3.9.21-2.el9_6.1.i686.rpm</filename>
          <sum type="sha256">2166ce8c1b81d3ef0fb2706bd0ee05cab8d84e8b8654cc1e24c4ed840dee2946</sum>
        </package>
        <package name="python3" version="3.9.21" release="2.el9_6.1" epoch="0" arch="i686" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-3.9.21-2.el9_6.1.i686.rpm</filename>
          <sum type="sha256">6a223eabebaad0c655953dd6f9c3fbd0cdcce4c0f0c2449f4257f98bf4652ef2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10379</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-10 13:34:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
  * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)
  * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
  * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846)
  * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10379" id="RHSA-2025:10379" type="rhsa" title="RHSA-2025:10379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49846" id="CVE-2022-49846" type="cve" title="CVE-2022-49846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21759" id="CVE-2025-21759" type="cve" title="CVE-2025-21759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21887" id="CVE-2025-21887" type="cve" title="CVE-2025-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22004" id="CVE-2025-22004" type="cve" title="CVE-2025-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37799" id="CVE-2025-37799" type="cve" title="CVE-2025-37799"/>
      <reference href="https://bugzilla.redhat.com/2348596" id="2348596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355405" id="2355405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357142" id="2357142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363432" id="2363432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363876" id="2363876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10379.html" id="ALSA-2025:10379" type="self" title="ALSA-2025:10379"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.25.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">800362ec04c4149df6f6b7f194a0bca9ebad1fd8d8e88fd70145bd560fca3777</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10407</id>
    <title>Moderate: python-setuptools security update</title>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-08 07:57:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10407" id="RHSA-2025:10407" type="rhsa" title="RHSA-2025:10407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10407.html" id="ALSA-2025:10407" type="self" title="ALSA-2025:10407"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="python3-setuptools-wheel" version="53.0.0" release="13.el9_6.1" epoch="0" arch="noarch" src="python-setuptools-53.0.0-13.el9_6.1.src.rpm">
          <filename>python3-setuptools-wheel-53.0.0-13.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">ddbc5c5f7e7fa1292b607f706e4eb9f6953171bf7b805748eaab5b728cfc42c7</sum>
        </package>
        <package name="python3-setuptools" version="53.0.0" release="13.el9_6.1" epoch="0" arch="noarch" src="python-setuptools-53.0.0-13.el9_6.1.src.rpm">
          <filename>python3-setuptools-53.0.0-13.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">f730a591b297e284ee6ef3cc48d0932b8db1cbc7dbb28d96e1374ec80c96fe37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10585</id>
    <title>Moderate: jq security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-10 13:06:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)
  * jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10585" id="RHSA-2025:10585" type="rhsa" title="RHSA-2025:10585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23337" id="CVE-2024-23337" type="cve" title="CVE-2024-23337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48060" id="CVE-2025-48060" type="cve" title="CVE-2025-48060"/>
      <reference href="https://bugzilla.redhat.com/2367807" id="2367807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367842" id="2367842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10585.html" id="ALSA-2025:10585" type="self" title="ALSA-2025:10585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="jq" version="1.6" release="17.el9_6.2" epoch="0" arch="i686" src="jq-1.6-17.el9_6.2.src.rpm">
          <filename>jq-1.6-17.el9_6.2.i686.rpm</filename>
          <sum type="sha256">c3c541c0f1e9462fe03d044bc51d32cb0a5ee7bec288c36b0d15e67d5652e13f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10699</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-10 12:52:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)
  * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)
  * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10699" id="RHSA-2025:10699" type="rhsa" title="RHSA-2025:10699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49794" id="CVE-2025-49794" type="cve" title="CVE-2025-49794"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49796" id="CVE-2025-49796" type="cve" title="CVE-2025-49796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6021" id="CVE-2025-6021" type="cve" title="CVE-2025-6021"/>
      <reference href="https://bugzilla.redhat.com/2372373" id="2372373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372385" id="2372385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372406" id="2372406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10699.html" id="ALSA-2025:10699" type="self" title="ALSA-2025:10699"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libxml2" version="2.9.13" release="10.el9_6" epoch="0" arch="i686" src="libxml2-2.9.13-10.el9_6.src.rpm">
          <filename>libxml2-2.9.13-10.el9_6.i686.rpm</filename>
          <sum type="sha256">b655af0c74b877fb062e6619a3101cb2fda824cdada589281c351d0f09b7199d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10837</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-14 00:00:00"/>
    <updated date="2025-07-17 08:20:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10837" id="RHSA-2025:10837" type="rhsa" title="RHSA-2025:10837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21991" id="CVE-2025-21991" type="cve" title="CVE-2025-21991"/>
      <reference href="https://bugzilla.redhat.com/2356917" id="2356917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10837.html" id="ALSA-2025:10837" type="self" title="ALSA-2025:10837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.26.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">f8c7b5eb7a0efba111fceab3afc67cb1260cb7e779766e381f1da512f31099b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11140</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:44:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
  * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11140" id="RHSA-2025:11140" type="rhsa" title="RHSA-2025:11140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4373" id="CVE-2025-4373" type="cve" title="CVE-2025-4373"/>
      <reference href="https://bugzilla.redhat.com/2325340" id="2325340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2364265" id="2364265" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11140.html" id="ALSA-2025:11140" type="self" title="ALSA-2025:11140"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="glib2" version="2.68.4" release="16.el9_6.2" epoch="0" arch="i686" src="glib2-2.68.4-16.el9_6.2.src.rpm">
          <filename>glib2-2.68.4-16.el9_6.2.i686.rpm</filename>
          <sum type="sha256">5f02c1e5f16784bac27ee5769529f34aa177a5be4f9354f59ef0efd590fc66d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11411</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-23 07:41:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
  * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11411" id="RHSA-2025:11411" type="rhsa" title="RHSA-2025:11411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58002" id="CVE-2024-58002" type="cve" title="CVE-2024-58002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38089" id="CVE-2025-38089" type="cve" title="CVE-2025-38089"/>
      <reference href="https://bugzilla.redhat.com/2348513" id="2348513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375529" id="2375529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11411.html" id="ALSA-2025:11411" type="self" title="ALSA-2025:11411"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.28.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">dd0919a5f9407fa4792561e8b7ec2e8b9b10c837915e9d19b32ea131374dba31</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11861</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-31 22:26:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)
  * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)
  * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)
  * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11861" id="RHSA-2025:11861" type="rhsa" title="RHSA-2025:11861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57980" id="CVE-2024-57980" type="cve" title="CVE-2024-57980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21905" id="CVE-2025-21905" type="cve" title="CVE-2025-21905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22085" id="CVE-2025-22085" type="cve" title="CVE-2025-22085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22091" id="CVE-2025-22091" type="cve" title="CVE-2025-22091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22113" id="CVE-2025-22113" type="cve" title="CVE-2025-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22121" id="CVE-2025-22121" type="cve" title="CVE-2025-22121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37797" id="CVE-2025-37797" type="cve" title="CVE-2025-37797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37958" id="CVE-2025-37958" type="cve" title="CVE-2025-37958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38086" id="CVE-2025-38086" type="cve" title="CVE-2025-38086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38110" id="CVE-2025-38110" type="cve" title="CVE-2025-38110"/>
      <reference href="https://bugzilla.redhat.com/2348599" id="2348599" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356613" id="2356613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360186" id="2360186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360199" id="2360199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360212" id="2360212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360219" id="2360219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363672" id="2363672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367572" id="2367572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375305" id="2375305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376035" id="2376035" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11861.html" id="ALSA-2025:11861" type="self" title="ALSA-2025:11861"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.30.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">2825a2e3e85f6043be5615196cad176d967e46ded0b861ddfd15ce6a1c3ddb6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11992</id>
    <title>Important: sqlite security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-29 09:25:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11992" id="RHSA-2025:11992" type="rhsa" title="RHSA-2025:11992"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11992.html" id="ALSA-2025:11992" type="self" title="ALSA-2025:11992"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="sqlite-libs" version="3.34.1" release="8.el9_6" epoch="0" arch="i686" src="sqlite-3.34.1-8.el9_6.src.rpm">
          <filename>sqlite-libs-3.34.1-8.el9_6.i686.rpm</filename>
          <sum type="sha256">b554ae2e990b78056ce74408806fe80bc3b3c292e999b77244f943bea479f4f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12083</id>
    <title>Moderate: icu security update</title>
    <issued date="2025-07-29 00:00:00"/>
    <updated date="2025-07-30 08:16:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>icu security update</summary>
    <description>The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.  

Security Fix(es):  

  * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12083" id="RHSA-2025:12083" type="rhsa" title="RHSA-2025:12083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5222" id="CVE-2025-5222" type="cve" title="CVE-2025-5222"/>
      <reference href="https://bugzilla.redhat.com/2368600" id="2368600" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12083.html" id="ALSA-2025:12083" type="self" title="ALSA-2025:12083"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libicu" version="67.1" release="10.el9_6" epoch="0" arch="i686" src="icu-67.1-10.el9_6.src.rpm">
          <filename>libicu-67.1-10.el9_6.i686.rpm</filename>
          <sum type="sha256">6c17a50f5f698a2060975191ce8fef3ec872de7fdcd4874d6ff03a2b988e60b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12447</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-07-31 00:00:00"/>
    <updated date="2025-08-01 13:39:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12447" id="RHSA-2025:12447" type="rhsa" title="RHSA-2025:12447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7425" id="CVE-2025-7425" type="cve" title="CVE-2025-7425"/>
      <reference href="https://bugzilla.redhat.com/2379274" id="2379274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12447.html" id="ALSA-2025:12447" type="self" title="ALSA-2025:12447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libxml2" version="2.9.13" release="11.el9_6" epoch="0" arch="i686" src="libxml2-2.9.13-11.el9_6.src.rpm">
          <filename>libxml2-2.9.13-11.el9_6.i686.rpm</filename>
          <sum type="sha256">0ad635cff5a61f4c36bfda71b2d801c99576613900ead1475d6a9f05262e30b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12519</id>
    <title>Moderate: python-requests security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-04 12:47:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-requests security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12519" id="RHSA-2025:12519" type="rhsa" title="RHSA-2025:12519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47081" id="CVE-2024-47081" type="cve" title="CVE-2024-47081"/>
      <reference href="https://bugzilla.redhat.com/2371272" id="2371272" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12519.html" id="ALSA-2025:12519" type="self" title="ALSA-2025:12519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="python3-requests" version="2.25.1" release="10.el9_6" epoch="0" arch="noarch" src="python-requests-2.25.1-10.el9_6.src.rpm">
          <filename>python3-requests-2.25.1-10.el9_6.noarch.rpm</filename>
          <sum type="sha256">80c8d782266664a64b93f1bb080bb9fde6bb859e9a248118e56953dfdb20cc89</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1262</id>
    <title>Important: kernel security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 16:31:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1262" id="RHSA-2025:1262" type="rhsa" title="RHSA-2025:1262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53104" id="CVE-2024-53104" type="cve" title="CVE-2024-53104"/>
      <reference href="https://bugzilla.redhat.com/2329817" id="2329817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1262.html" id="ALSA-2025:1262" type="self" title="ALSA-2025:1262"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.23.2.el9_5.noarch.rpm</filename>
          <sum type="sha256">e32ff75c6a6c28349bb7e2dac9d68e96d83a30e81432b8d501609912cb1dd8fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12746</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-07 11:24:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929)
  * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)
  * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
  * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
  * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
  * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12746" id="RHSA-2025:12746" type="rhsa" title="RHSA-2025:12746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49788" id="CVE-2022-49788" type="cve" title="CVE-2022-49788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21727" id="CVE-2025-21727" type="cve" title="CVE-2025-21727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21928" id="CVE-2025-21928" type="cve" title="CVE-2025-21928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21929" id="CVE-2025-21929" type="cve" title="CVE-2025-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21962" id="CVE-2025-21962" type="cve" title="CVE-2025-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22020" id="CVE-2025-22020" type="cve" title="CVE-2025-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37890" id="CVE-2025-37890" type="cve" title="CVE-2025-37890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38052" id="CVE-2025-38052" type="cve" title="CVE-2025-38052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38087" id="CVE-2025-38087" type="cve" title="CVE-2025-38087"/>
      <reference href="https://bugzilla.redhat.com/2348516" id="2348516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356592" id="2356592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356594" id="2356594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356624" id="2356624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360099" id="2360099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363378" id="2363378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366848" id="2366848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373380" id="2373380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375531" id="2375531" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12746.html" id="ALSA-2025:12746" type="self" title="ALSA-2025:12746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.32.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">f18b56229b2768edc0735443d4b50e4eceba566265d1d6a260ce354b4212e5c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1330</id>
    <title>Important: openssl security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-12 17:22:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1330" id="RHSA-2025:1330" type="rhsa" title="RHSA-2025:1330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12797" id="CVE-2024-12797" type="cve" title="CVE-2024-12797"/>
      <reference href="https://bugzilla.redhat.com/2342757" id="2342757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1330.html" id="ALSA-2025:1330" type="self" title="ALSA-2025:1330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="openssl-libs" version="3.2.2" release="6.el9_5.1" epoch="1" arch="i686" src="openssl-3.2.2-6.el9_5.1.src.rpm">
          <filename>openssl-libs-3.2.2-6.el9_5.1.i686.rpm</filename>
          <sum type="sha256">1ffc5c8f4b7422e7d92404b1bb26b7125f720e86ec0d88673a35d1832f4ad336</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13428</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-08-07 00:00:00"/>
    <updated date="2025-08-07 21:44:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)


The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
  * libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13428" id="RHSA-2025:13428" type="rhsa" title="RHSA-2025:13428"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32414" id="CVE-2025-32414" type="cve" title="CVE-2025-32414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32415" id="CVE-2025-32415" type="cve" title="CVE-2025-32415"/>
      <reference href="https://bugzilla.redhat.com/2358121" id="2358121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360768" id="2360768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13428.html" id="ALSA-2025:13428" type="self" title="ALSA-2025:13428"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libxml2" version="2.9.13" release="12.el9_6" epoch="0" arch="i686" src="libxml2-2.9.13-12.el9_6.src.rpm">
          <filename>libxml2-2.9.13-12.el9_6.i686.rpm</filename>
          <sum type="sha256">d997ff9cc15e74d7d3e55d137ba46cc19e7eff5231dc509a2ab40d54c971e72a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1346</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-14 07:49:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1346" id="RHSA-2025:1346" type="rhsa" title="RHSA-2025:1346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1346.html" id="ALSA-2025:1346" type="self" title="ALSA-2025:1346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="libgomp" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="i686" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libgomp-11.5.0-5.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">05d9bf01b8d6fec5a215786b771c814dd8a7d22d4e5968ac284170bf29108090</sum>
        </package>
        <package name="libstdc++" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="i686" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libstdc++-11.5.0-5.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">05fd29569c312a661374aa69e28ed5cad20812822070a3138265c92a446e2c80</sum>
        </package>
        <package name="libgcc" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="i686" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libgcc-11.5.0-5.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">4bdb8e2732d38b112f13154c94adba019de8e35b3194cc34756a68a9cf96de4e</sum>
        </package>
        <package name="libgfortran" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="i686" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libgfortran-11.5.0-5.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">5e08641b2a86d6bccbc87ee2178ba938c0005a1dd87c41082acc660f0292b75d</sum>
        </package>
        <package name="libatomic" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="i686" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libatomic-11.5.0-5.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">779cd216e43ae918a6582c6d97d54655ee572703b9fa3e0a22c4f124fb8469c0</sum>
        </package>
        <package name="libquadmath" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="i686" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libquadmath-11.5.0-5.el9_5.alma.1.i686.rpm</filename>
          <sum type="sha256">dd01361ef2ebdc77c60c9ce30e37b929d52336080569e637c25deda9643f3b1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1350</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-13 11:20:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1350" id="RHSA-2025:1350" type="rhsa" title="RHSA-2025:1350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49043" id="CVE-2022-49043" type="cve" title="CVE-2022-49043"/>
      <reference href="https://bugzilla.redhat.com/2342118" id="2342118" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1350.html" id="ALSA-2025:1350" type="self" title="ALSA-2025:1350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="libxml2" version="2.9.13" release="6.el9_5.1" epoch="0" arch="i686" src="libxml2-2.9.13-6.el9_5.1.src.rpm">
          <filename>libxml2-2.9.13-6.el9_5.1.i686.rpm</filename>
          <sum type="sha256">c63e590e10becd27e7ab11949b279067dfdfc34a57b833128d5a59d947aca3e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13602</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-08-11 00:00:00"/>
    <updated date="2025-08-15 10:33:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)


The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
  * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13602" id="RHSA-2025:13602" type="rhsa" title="RHSA-2025:13602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38079" id="CVE-2025-38079" type="cve" title="CVE-2025-38079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38292" id="CVE-2025-38292" type="cve" title="CVE-2025-38292"/>
      <reference href="https://bugzilla.redhat.com/2373383" id="2373383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379219" id="2379219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13602.html" id="ALSA-2025:13602" type="self" title="ALSA-2025:13602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.33.2.el9_6.noarch.rpm</filename>
          <sum type="sha256">67f5994d8d8b09e1907e5c29a3be773020852b81eca189ca0d68bf56f0c514af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13962</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-22 07:57:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)
  * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
  * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)
  * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
  * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
  * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)
  * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13962" id="RHSA-2025:13962" type="rhsa" title="RHSA-2025:13962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21867" id="CVE-2025-21867" type="cve" title="CVE-2025-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38084" id="CVE-2025-38084" type="cve" title="CVE-2025-38084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38085" id="CVE-2025-38085" type="cve" title="CVE-2025-38085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38124" id="CVE-2025-38124" type="cve" title="CVE-2025-38124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38159" id="CVE-2025-38159" type="cve" title="CVE-2025-38159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38250" id="CVE-2025-38250" type="cve" title="CVE-2025-38250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38380" id="CVE-2025-38380" type="cve" title="CVE-2025-38380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38471" id="CVE-2025-38471" type="cve" title="CVE-2025-38471"/>
      <reference href="https://bugzilla.redhat.com/2355334" id="2355334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375303" id="2375303" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375304" id="2375304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376041" id="2376041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376064" id="2376064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378982" id="2378982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383381" id="2383381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383893" id="2383893" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13962.html" id="ALSA-2025:13962" type="self" title="ALSA-2025:13962"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.35.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">b54e44fd9b85a7cce2614d7622802a1665b0168e194c7b1b6c289f79cb69dea3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14130</id>
    <title>Important: libarchive security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-20 14:02:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14130" id="RHSA-2025:14130" type="rhsa" title="RHSA-2025:14130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5914" id="CVE-2025-5914" type="cve" title="CVE-2025-5914"/>
      <reference href="https://bugzilla.redhat.com/2370861" id="2370861" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14130.html" id="ALSA-2025:14130" type="self" title="ALSA-2025:14130"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libarchive" version="3.5.3" release="6.el9_6" epoch="0" arch="i686" src="libarchive-3.5.3-6.el9_6.src.rpm">
          <filename>libarchive-3.5.3-6.el9_6.i686.rpm</filename>
          <sum type="sha256">e94cf2e63e7b7a9f3e2396ceeb5b886b13e8f215b9bf224a9981fd766249c038</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14420</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 12:00:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
  * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
  * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14420" id="RHSA-2025:14420" type="rhsa" title="RHSA-2025:14420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22058" id="CVE-2025-22058" type="cve" title="CVE-2025-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37914" id="CVE-2025-37914" type="cve" title="CVE-2025-37914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38417" id="CVE-2025-38417" type="cve" title="CVE-2025-38417"/>
      <reference href="https://bugzilla.redhat.com/2360276" id="2360276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367500" id="2367500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383463" id="2383463" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14420.html" id="ALSA-2025:14420" type="self" title="ALSA-2025:14420"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.37.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">f7c6cf0f17070dcfa22b13cc564f504b5414f0d3c5a4ff064602971ab4509dda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15011</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:19:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
  * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
  * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
  * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
  * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
  * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15011" id="RHSA-2025:15011" type="rhsa" title="RHSA-2025:15011"/>
      <reference href="https://bugzilla.redhat.com/2365024" id="2365024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376392" id="2376392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376406" id="2376406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382054" id="2382054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383509" id="2383509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383513" id="2383513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2387866" id="2387866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15011.html" id="ALSA-2025:15011" type="self" title="ALSA-2025:15011"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37823.html" id="CVE-2025-37823" type="cve" title="CVE-2025-37823"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38200.html" id="CVE-2025-38200" type="cve" title="CVE-2025-38200"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38211.html" id="CVE-2025-38211" type="cve" title="CVE-2025-38211"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38350.html" id="CVE-2025-38350" type="cve" title="CVE-2025-38350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38461.html" id="CVE-2025-38461" type="cve" title="CVE-2025-38461"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38464.html" id="CVE-2025-38464" type="cve" title="CVE-2025-38464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38500.html" id="CVE-2025-38500" type="cve" title="CVE-2025-38500"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38684.html" id="CVE-2025-38684" type="cve" title="CVE-2025-38684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.39.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">c58a5ab73d97b8c597460175dde4bb8966150c3d5516d1ae7dc26a2183d0081a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15019</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:10:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15019" id="RHSA-2025:15019" type="rhsa" title="RHSA-2025:15019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15019.html" id="ALSA-2025:15019" type="self" title="ALSA-2025:15019"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="python3-libs" version="3.9.21" release="2.el9_6.2" epoch="0" arch="i686" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-libs-3.9.21-2.el9_6.2.i686.rpm</filename>
          <sum type="sha256">53220324c157acaa46009f6dca9deb8bd6a7548bea1d053ddbabec532e0c1263</sum>
        </package>
        <package name="python3" version="3.9.21" release="2.el9_6.2" epoch="0" arch="i686" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-3.9.21-2.el9_6.2.i686.rpm</filename>
          <sum type="sha256">9f17c8cacd830c163f15f73c91282e58297972dcefef51aba5a8480d1ea9df2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15099</id>
    <title>Important: pam security update</title>
    <issued date="2025-09-03 00:00:00"/>
    <updated date="2025-09-03 08:51:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
  * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15099" id="RHSA-2025:15099" type="rhsa" title="RHSA-2025:15099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6020" id="CVE-2025-6020" type="cve" title="CVE-2025-6020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8941" id="CVE-2025-8941" type="cve" title="CVE-2025-8941"/>
      <reference href="https://bugzilla.redhat.com/2372512" id="2372512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388220" id="2388220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15099.html" id="ALSA-2025:15099" type="self" title="ALSA-2025:15099"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="pam" version="1.5.1" release="26.el9_6" epoch="0" arch="i686" src="pam-1.5.1-26.el9_6.src.rpm">
          <filename>pam-1.5.1-26.el9_6.i686.rpm</filename>
          <sum type="sha256">169521396fdb167c769cf8e5231017c6cdae6d794e1837bd603ec53ca0de27bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15429</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-08 00:00:00"/>
    <updated date="2025-09-15 09:02:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803)
  * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15429" id="RHSA-2025:15429" type="rhsa" title="RHSA-2025:15429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37803" id="CVE-2025-37803" type="cve" title="CVE-2025-37803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38392" id="CVE-2025-38392" type="cve" title="CVE-2025-38392"/>
      <reference href="https://bugzilla.redhat.com/2365013" id="2365013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383407" id="2383407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15429.html" id="ALSA-2025:15429" type="self" title="ALSA-2025:15429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.41.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">58aceec38c043d7e7140a8917fa2e274ce00b713f1f01af2a939a37f7c42467f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15661</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-16 09:35:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
  * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)
  * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)
  * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15661" id="RHSA-2025:15661" type="rhsa" title="RHSA-2025:15661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22097" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38332" id="CVE-2025-38332" type="cve" title="CVE-2025-38332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38352" id="CVE-2025-38352" type="cve" title="CVE-2025-38352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38449" id="CVE-2025-38449" type="cve" title="CVE-2025-38449"/>
      <reference href="https://bugzilla.redhat.com/2360223" id="2360223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379246" id="2379246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382581" id="2382581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383519" id="2383519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15661.html" id="ALSA-2025:15661" type="self" title="ALSA-2025:15661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.42.2.el9_6.noarch.rpm</filename>
          <sum type="sha256">f629d5e7e913ceecfbff3999ba851fb127f69bfe72acf0e1e45accaf94cfebbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15700</id>
    <title>Important: cups security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-29 08:58:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for  
Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


(CVE-2025-58364)  

  * cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060)


For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE page(s)  
listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15700" id="RHSA-2025:15700" type="rhsa" title="RHSA-2025:15700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58060" id="CVE-2025-58060" type="cve" title="CVE-2025-58060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58364" id="CVE-2025-58364" type="cve" title="CVE-2025-58364"/>
      <reference href="https://bugzilla.redhat.com/2392595" id="2392595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393078" id="2393078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15700.html" id="ALSA-2025:15700" type="self" title="ALSA-2025:15700"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="cups-libs" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="i686" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-libs-2.3.3op2-33.el9_6.1.i686.rpm</filename>
          <sum type="sha256">df3d2a20b846701b6dd3266a8fe430e2dc3bfb7acb1c9f210c6aed458cb529bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15740</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-15 00:00:00"/>
    <updated date="2025-09-25 08:47:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: Delay put pmc-&gt;idev in mld_del_delrec() (CVE-2025-38550)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15740" id="RHSA-2025:15740" type="rhsa" title="RHSA-2025:15740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38550" id="CVE-2025-38550" type="cve" title="CVE-2025-38550"/>
      <reference href="https://bugzilla.redhat.com/2388941" id="2388941" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15740.html" id="ALSA-2025:15740" type="self" title="ALSA-2025:15740"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.44.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">42e0eb00647169d924025077fc44307aa3257997c3aaa7123fb1911d424d2284</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16116</id>
    <title>Moderate: gnutls security, bug fix, and enhancement update</title>
    <issued date="2025-09-17 00:00:00"/>
    <updated date="2025-09-29 08:47:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security, bug fix, and enhancement update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
  * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)
  * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
  * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)


Bug Fix(es) and Enhancement(s):  

  * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
  * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)
  * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
  * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16116" id="RHSA-2025:16116" type="rhsa" title="RHSA-2025:16116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32988" id="CVE-2025-32988" type="cve" title="CVE-2025-32988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32989" id="CVE-2025-32989" type="cve" title="CVE-2025-32989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32990" id="CVE-2025-32990" type="cve" title="CVE-2025-32990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6395" id="CVE-2025-6395" type="cve" title="CVE-2025-6395"/>
      <reference href="https://bugzilla.redhat.com/2359620" id="2359620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359621" id="2359621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359622" id="2359622" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376755" id="2376755" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16116.html" id="ALSA-2025:16116" type="self" title="ALSA-2025:16116"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="gnutls" version="3.8.3" release="6.el9_6.2" epoch="0" arch="i686" src="gnutls-3.8.3-6.el9_6.2.src.rpm">
          <filename>gnutls-3.8.3-6.el9_6.2.i686.rpm</filename>
          <sum type="sha256">eab218d1ae661b6e6ce83bc2156714c9481aebd833934de6baa34ed2d6fc7714</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16398</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-22 00:00:00"/>
    <updated date="2025-09-29 08:44:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: usb: smsc75xx: Limit packet length to skb-&gt;len (CVE-2023-53125)
  * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810)
  * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)
  * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16398" id="RHSA-2025:16398" type="rhsa" title="RHSA-2025:16398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53125" id="CVE-2023-53125" type="cve" title="CVE-2023-53125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37810" id="CVE-2025-37810" type="cve" title="CVE-2025-37810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38498" id="CVE-2025-38498" type="cve" title="CVE-2025-38498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39694" id="CVE-2025-39694" type="cve" title="CVE-2025-39694"/>
      <reference href="https://bugzilla.redhat.com/2363686" id="2363686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365028" id="2365028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384422" id="2384422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393534" id="2393534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16398.html" id="ALSA-2025:16398" type="self" title="ALSA-2025:16398"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.46.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">b7c9324e4ddade47a730801c23eb442812253922fc6f04faf529c12a0069835a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1659</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-03-04 08:49:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1659" id="RHSA-2025:1659" type="rhsa" title="RHSA-2025:1659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52490" id="CVE-2023-52490" type="cve" title="CVE-2023-52490"/>
      <reference href="https://bugzilla.redhat.com/2269187" id="2269187" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1659.html" id="ALSA-2025:1659" type="self" title="ALSA-2025:1659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.26.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">198b166df62201e35ff2a8c8d1a5ca267231adc1dd0e11874d380b9ab0c2919c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-10-01 09:16:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)
  * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
  * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)
  * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)
  * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16880" id="RHSA-2025:16880" type="rhsa" title="RHSA-2025:16880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38472" id="CVE-2025-38472" type="cve" title="CVE-2025-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38527" id="CVE-2025-38527" type="cve" title="CVE-2025-38527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38718" id="CVE-2025-38718" type="cve" title="CVE-2025-38718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39682" id="CVE-2025-39682" type="cve" title="CVE-2025-39682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39698" id="CVE-2025-39698" type="cve" title="CVE-2025-39698"/>
      <reference href="https://bugzilla.redhat.com/2383916" id="2383916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388928" id="2388928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393166" id="2393166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393511" id="2393511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393519" id="2393519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16880.html" id="ALSA-2025:16880" type="self" title="ALSA-2025:16880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.49.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">032d14ef53f9d9ad33cbfd3cc3aa9b62b44f076dd084a8bed6e2b003bc5a078b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17377</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-06 00:00:00"/>
    <updated date="2025-10-09 07:41:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
  * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351)
  * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17377" id="RHSA-2025:17377" type="rhsa" title="RHSA-2025:17377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50301" id="CVE-2024-50301" type="cve" title="CVE-2024-50301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38351" id="CVE-2025-38351" type="cve" title="CVE-2025-38351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39761" id="CVE-2025-39761" type="cve" title="CVE-2025-39761"/>
      <reference href="https://bugzilla.redhat.com/2327188" id="2327188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382059" id="2382059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394606" id="2394606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17377.html" id="ALSA-2025:17377" type="self" title="ALSA-2025:17377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.51.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">ec740e3e4ef8fb9403dff07c21e3deb82aa4be2d681b7c4927d546167a09a302</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17742</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-14 13:35:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17742" id="RHSA-2025:17742" type="rhsa" title="RHSA-2025:17742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17742.html" id="ALSA-2025:17742" type="self" title="ALSA-2025:17742"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="22.el9_6.1" epoch="2" arch="noarch" src="vim-8.2.2637-22.el9_6.1.src.rpm">
          <filename>vim-filesystem-8.2.2637-22.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">6b729898b51fd8c517a86254b3055b02e253adb7af04b790d8303e57b40c856b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17760</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-16 07:32:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)
  * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
  * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
  * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17760" id="RHSA-2025:17760" type="rhsa" title="RHSA-2025:17760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53373" id="CVE-2023-53373" type="cve" title="CVE-2023-53373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38556" id="CVE-2025-38556" type="cve" title="CVE-2025-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38614" id="CVE-2025-38614" type="cve" title="CVE-2025-38614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39757" id="CVE-2025-39757" type="cve" title="CVE-2025-39757"/>
      <reference href="https://bugzilla.redhat.com/2389456" id="2389456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389491" id="2389491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394615" id="2394615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396379" id="2396379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17760.html" id="ALSA-2025:17760" type="self" title="ALSA-2025:17760"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.52.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">50c83aad7c7c5efecbf4b7ed0d793f1d1f3f01e67b7eb8e3306d5a00bc311312</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18275</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-10-16 00:00:00"/>
    <updated date="2025-10-17 08:04:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18275" id="RHSA-2025:18275" type="rhsa" title="RHSA-2025:18275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18275.html" id="ALSA-2025:18275" type="self" title="ALSA-2025:18275"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libssh-config" version="0.10.4" release="15.el9_6" epoch="0" arch="noarch" src="libssh-0.10.4-15.el9_6.src.rpm">
          <filename>libssh-config-0.10.4-15.el9_6.noarch.rpm</filename>
          <sum type="sha256">1608de2b893235495977bb972a9f975c6a743247301da12c536a04419316ad27</sum>
        </package>
        <package name="libssh" version="0.10.4" release="15.el9_6" epoch="0" arch="i686" src="libssh-0.10.4-15.el9_6.src.rpm">
          <filename>libssh-0.10.4-15.el9_6.i686.rpm</filename>
          <sum type="sha256">919bc9a6918b489abd8d0726e24040891ac167e4bcd819a4ab674b81742be1b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18281</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-22 10:16:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)
  * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566)
  * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
  * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
  * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18281" id="RHSA-2025:18281" type="rhsa" title="RHSA-2025:18281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50087" id="CVE-2022-50087" type="cve" title="CVE-2022-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22026" id="CVE-2025-22026" type="cve" title="CVE-2025-22026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38566" id="CVE-2025-38566" type="cve" title="CVE-2025-38566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38571" id="CVE-2025-38571" type="cve" title="CVE-2025-38571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39817" id="CVE-2025-39817" type="cve" title="CVE-2025-39817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39841" id="CVE-2025-39841" type="cve" title="CVE-2025-39841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39849" id="CVE-2025-39849" type="cve" title="CVE-2025-39849"/>
      <reference href="https://bugzilla.redhat.com/2360224" id="2360224" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373539" id="2373539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389480" id="2389480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389487" id="2389487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395805" id="2395805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396928" id="2396928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396944" id="2396944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18281.html" id="ALSA-2025:18281" type="self" title="ALSA-2025:18281"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.55.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">ec2a33112bc175921ed8dae5b141c55fe51ad31c69e588f28723f79b94a5d38f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19409</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 11:49:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)
  * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
  * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19409" id="RHSA-2025:19409" type="rhsa" title="RHSA-2025:19409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50367" id="CVE-2022-50367" type="cve" title="CVE-2022-50367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53494" id="CVE-2023-53494" type="cve" title="CVE-2023-53494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39702" id="CVE-2025-39702" type="cve" title="CVE-2025-39702"/>
      <reference href="https://bugzilla.redhat.com/2393533" id="2393533" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396114" id="2396114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400777" id="2400777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19409.html" id="ALSA-2025:19409" type="self" title="ALSA-2025:19409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.60.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">eef8e6059900bf395b6ca1236984e5e2deb322877735ca5c91df7959b08bb793</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19930</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-12 09:54:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19930" id="RHSA-2025:19930" type="rhsa" title="RHSA-2025:19930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40300" id="CVE-2025-40300" type="cve" title="CVE-2025-40300"/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394627" id="2394627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19930.html" id="ALSA-2025:19930" type="self" title="ALSA-2025:19930"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.62.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">45a8febca4789f9028e18f736696e927654169a82b961ed5df52d621e87f30d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20518</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:15:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  * kernel: vfs: fix race between evice_inodes() and find_inode()&amp;#38;iput() (CVE-2024-47679)
  * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  * kernel: afs: Fix lock recursion (CVE-2024-53090)
  * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)
  * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643)
  * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623)
  * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357)
  * kernel: list: fix a data-race around ep-&gt;rdllist (CVE-2022-49443)
  * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648)
  * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993)
  * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745)
  * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068)
  * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829)
  * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20518" id="RHSA-2025:20518" type="rhsa" title="RHSA-2025:20518"/>
      <reference href="https://bugzilla.redhat.com/2298169" id="2298169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312077" id="2312077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2313092" id="2313092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320172" id="2320172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320259" id="2320259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320455" id="2320455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320616" id="2320616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320722" id="2320722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324549" id="2324549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327203" id="2327203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327374" id="2327374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327887" id="2327887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329918" id="2329918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330341" id="2330341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334357" id="2334357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334396" id="2334396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334439" id="2334439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334537" id="2334537" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334560" id="2334560" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334795" id="2334795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334829" id="2334829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336541" id="2336541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337124" id="2337124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338814" id="2338814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338832" id="2338832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343175" id="2343175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347707" id="2347707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347753" id="2347753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347759" id="2347759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347781" id="2347781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347807" id="2347807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347859" id="2347859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347919" id="2347919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347968" id="2347968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348022" id="2348022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348071" id="2348071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348238" id="2348238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348240" id="2348240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348279" id="2348279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348515" id="2348515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348528" id="2348528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348554" id="2348554" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348566" id="2348566" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348573" id="2348573" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348578" id="2348578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348585" id="2348585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348615" id="2348615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348634" id="2348634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348654" id="2348654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348901" id="2348901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350367" id="2350367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350374" id="2350374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350388" id="2350388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350400" id="2350400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350585" id="2350585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351633" id="2351633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363380" id="2363380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383441" id="2383441" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20518.html" id="ALSA-2025:20518" type="self" title="ALSA-2025:20518"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-48830.html" id="CVE-2022-48830" type="cve" title="CVE-2022-48830"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49024.html" id="CVE-2022-49024" type="cve" title="CVE-2022-49024"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49269.html" id="CVE-2022-49269" type="cve" title="CVE-2022-49269"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49353.html" id="CVE-2022-49353" type="cve" title="CVE-2022-49353"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49357.html" id="CVE-2022-49357" type="cve" title="CVE-2022-49357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49432.html" id="CVE-2022-49432" type="cve" title="CVE-2022-49432"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49437.html" id="CVE-2022-49437" type="cve" title="CVE-2022-49437"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49443.html" id="CVE-2022-49443" type="cve" title="CVE-2022-49443"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49623.html" id="CVE-2022-49623" type="cve" title="CVE-2022-49623"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49627.html" id="CVE-2022-49627" type="cve" title="CVE-2022-49627"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49643.html" id="CVE-2022-49643" type="cve" title="CVE-2022-49643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49648.html" id="CVE-2022-49648" type="cve" title="CVE-2022-49648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49657.html" id="CVE-2022-49657" type="cve" title="CVE-2022-49657"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49670.html" id="CVE-2022-49670" type="cve" title="CVE-2022-49670"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49672.html" id="CVE-2022-49672" type="cve" title="CVE-2022-49672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49845.html" id="CVE-2022-49845" type="cve" title="CVE-2022-49845"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46689.html" id="CVE-2024-46689" type="cve" title="CVE-2024-46689"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46744.html" id="CVE-2024-46744" type="cve" title="CVE-2024-46744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47679.html" id="CVE-2024-47679" type="cve" title="CVE-2024-47679"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47727.html" id="CVE-2024-47727" type="cve" title="CVE-2024-47727"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49570.html" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49864.html" id="CVE-2024-49864" type="cve" title="CVE-2024-49864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50060.html" id="CVE-2024-50060" type="cve" title="CVE-2024-50060"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50195.html" id="CVE-2024-50195" type="cve" title="CVE-2024-50195"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50294.html" id="CVE-2024-50294" type="cve" title="CVE-2024-50294"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-52332.html" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53052.html" id="CVE-2024-53052" type="cve" title="CVE-2024-53052"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53090.html" id="CVE-2024-53090" type="cve" title="CVE-2024-53090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53119.html" id="CVE-2024-53119" type="cve" title="CVE-2024-53119"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53135.html" id="CVE-2024-53135" type="cve" title="CVE-2024-53135"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53170.html" id="CVE-2024-53170" type="cve" title="CVE-2024-53170"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53216.html" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53229.html" id="CVE-2024-53229" type="cve" title="CVE-2024-53229"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53241.html" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53680.html" id="CVE-2024-53680" type="cve" title="CVE-2024-53680"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-54456.html" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56603.html" id="CVE-2024-56603" type="cve" title="CVE-2024-56603"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56645.html" id="CVE-2024-56645" type="cve" title="CVE-2024-56645"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56662.html" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56672.html" id="CVE-2024-56672" type="cve" title="CVE-2024-56672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56675.html" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56690.html" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56709.html" id="CVE-2024-56709" type="cve" title="CVE-2024-56709"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56739.html" id="CVE-2024-56739" type="cve" title="CVE-2024-56739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56786.html" id="CVE-2024-56786" type="cve" title="CVE-2024-56786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57981.html" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57986.html" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57987.html" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57988.html" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57989.html" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57990.html" id="CVE-2024-57990" type="cve" title="CVE-2024-57990"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57993.html" id="CVE-2024-57993" type="cve" title="CVE-2024-57993"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57995.html" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57998.html" id="CVE-2024-57998" type="cve" title="CVE-2024-57998"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58012.html" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58014.html" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58015.html" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58057.html" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58062.html" id="CVE-2024-58062" type="cve" title="CVE-2024-58062"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58068.html" id="CVE-2024-58068" type="cve" title="CVE-2024-58068"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58072.html" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58075.html" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58077.html" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58083.html" id="CVE-2024-58083" type="cve" title="CVE-2024-58083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58088.html" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21631.html" id="CVE-2025-21631" type="cve" title="CVE-2025-21631"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21647.html" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21648.html" id="CVE-2025-21648" type="cve" title="CVE-2025-21648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21671.html" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21672.html" id="CVE-2025-21672" type="cve" title="CVE-2025-21672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21691.html" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21693.html" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21696.html" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21702.html" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21714.html" id="CVE-2025-21714" type="cve" title="CVE-2025-21714"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21726.html" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21728.html" id="CVE-2025-21728" type="cve" title="CVE-2025-21728"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21729.html" id="CVE-2025-21729" type="cve" title="CVE-2025-21729"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21738.html" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21739.html" id="CVE-2025-21739" type="cve" title="CVE-2025-21739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21745.html" id="CVE-2025-21745" type="cve" title="CVE-2025-21745"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21746.html" id="CVE-2025-21746" type="cve" title="CVE-2025-21746"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21765.html" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21786.html" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21787.html" id="CVE-2025-21787" type="cve" title="CVE-2025-21787"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21790.html" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21791.html" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21795.html" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21796.html" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21806.html" id="CVE-2025-21806" type="cve" title="CVE-2025-21806"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21826.html" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21828.html" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21829.html" id="CVE-2025-21829" type="cve" title="CVE-2025-21829"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21837.html" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21839.html" id="CVE-2025-21839" type="cve" title="CVE-2025-21839"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21844.html" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21846.html" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21847.html" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21848.html" id="CVE-2025-21848" type="cve" title="CVE-2025-21848"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21851.html" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21853.html" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21855.html" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21861.html" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21863.html" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21864.html" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22056.html" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22097.html" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37994.html" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38116.html" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38396.html" id="CVE-2025-38396" type="cve" title="CVE-2025-38396"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.5.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">38b0c579738575ed28238628956d361d2705ecd2caa15b5a97c75d4552e8b3dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20532</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:18:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. (CVE-2024-45777)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20532" id="RHSA-2025:20532" type="rhsa" title="RHSA-2025:20532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45777" id="CVE-2024-45777" type="cve" title="CVE-2024-45777"/>
      <reference href="https://bugzilla.redhat.com/2346343" id="2346343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20532.html" id="ALSA-2025:20532" type="self" title="ALSA-2025:20532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="grub2-efi-aa64-modules" version="2.06" release="114.el9_7.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.alma.1.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-114.el9_7.alma.1.noarch.rpm</filename>
          <sum type="sha256">024a3e1c26e51feeed7910884b1913d14539f0ec6a6f9b48614a3e12831d7ef0</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="114.el9_7.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.alma.1.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-114.el9_7.alma.1.noarch.rpm</filename>
          <sum type="sha256">318f7ff4ceba087242b7eaff4c83876795cb6aaffc045e634e869f98985e9913</sum>
        </package>
        <package name="grub2-common" version="2.06" release="114.el9_7.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.alma.1.src.rpm">
          <filename>grub2-common-2.06-114.el9_7.alma.1.noarch.rpm</filename>
          <sum type="sha256">8fd362f32efa8a13bf0e0db18cd6f8d8f01b45c2a7f747ab81971a169df61c1f</sum>
        </package>
        <package name="grub2-pc-modules" version="2.06" release="114.el9_7.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-114.el9_7.alma.1.noarch.rpm</filename>
          <sum type="sha256">bbb561d57e7a44ab17215b52a0aefbfcc28b895d1f31c680c0249ba5d4058521</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20559</id>
    <title>Low: shadow-utils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:19:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts.   

Security Fix(es):  

  * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20559" id="RHSA-2025:20559" type="rhsa" title="RHSA-2025:20559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56433" id="CVE-2024-56433" type="cve" title="CVE-2024-56433"/>
      <reference href="https://bugzilla.redhat.com/2334165" id="2334165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20559.html" id="ALSA-2025:20559" type="self" title="ALSA-2025:20559"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="shadow-utils-subid" version="4.9" release="15.el9" epoch="2" arch="i686" src="shadow-utils-4.9-15.el9.src.rpm">
          <filename>shadow-utils-subid-4.9-15.el9.i686.rpm</filename>
          <sum type="sha256">837f64510e31e0e06f961dd40238d779c5d8e49612a42ab9598c15705b8ebe8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20936</id>
    <title>Important: sqlite security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:25:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20936" id="RHSA-2025:20936" type="rhsa" title="RHSA-2025:20936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20936.html" id="ALSA-2025:20936" type="self" title="ALSA-2025:20936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="sqlite-libs" version="3.34.1" release="9.el9_7" epoch="0" arch="i686" src="sqlite-3.34.1-9.el9_7.src.rpm">
          <filename>sqlite-libs-3.34.1-9.el9_7.i686.rpm</filename>
          <sum type="sha256">3f92690fc6cdf18fb4a223617cd91eee46fad35b569fa681a643c6642a914ac8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20943</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:28:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20943" id="RHSA-2025:20943" type="rhsa" title="RHSA-2025:20943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20943.html" id="ALSA-2025:20943" type="self" title="ALSA-2025:20943"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libssh-config" version="0.10.4" release="15.el9_7" epoch="0" arch="noarch" src="libssh-0.10.4-15.el9_7.src.rpm">
          <filename>libssh-config-0.10.4-15.el9_7.noarch.rpm</filename>
          <sum type="sha256">4f6b50b82dc5bc30809f2ca6900f3494ec81e694370fa0530db7e37156a94079</sum>
        </package>
        <package name="libssh" version="0.10.4" release="15.el9_7" epoch="0" arch="i686" src="libssh-0.10.4-15.el9_7.src.rpm">
          <filename>libssh-0.10.4-15.el9_7.i686.rpm</filename>
          <sum type="sha256">6237496256dbf95e2e9361701eac1183a763db183c7ca133b2b8229e5518512f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20945</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:26:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20945" id="RHSA-2025:20945" type="rhsa" title="RHSA-2025:20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20945.html" id="ALSA-2025:20945" type="self" title="ALSA-2025:20945"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="23.el9_7" epoch="2" arch="noarch" src="vim-8.2.2637-23.el9_7.src.rpm">
          <filename>vim-filesystem-8.2.2637-23.el9_7.noarch.rpm</filename>
          <sum type="sha256">2545904e3e3a1aab94ddd6c4c0e87a3fc167a76105dd76515f2d37bdf20f35b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20954</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-01 08:12:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20954" id="RHSA-2025:20954" type="rhsa" title="RHSA-2025:20954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20954.html" id="ALSA-2025:20954" type="self" title="ALSA-2025:20954"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-sssdconfig" version="2.9.7" release="4.el9_7.1" epoch="0" arch="noarch" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>python3-sssdconfig-2.9.7-4.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">9bb6db54316a4584e3c0a55c91f77105c8e3c7eeff9403a30d047b6f2458941a</sum>
        </package>
        <package name="libipa_hbac" version="2.9.7" release="4.el9_7.1" epoch="0" arch="i686" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>libipa_hbac-2.9.7-4.el9_7.1.i686.rpm</filename>
          <sum type="sha256">aacf6c2e359402e79fc4ef612910b85e8d20cea42cb24b7c59266f1817a4ac18</sum>
        </package>
        <package name="libsss_idmap" version="2.9.7" release="4.el9_7.1" epoch="0" arch="i686" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>libsss_idmap-2.9.7-4.el9_7.1.i686.rpm</filename>
          <sum type="sha256">d1c99209e5661f3b31dda664f885a4e248da19918b81966291694396c4cedae7</sum>
        </package>
        <package name="libsss_simpleifp" version="2.9.7" release="4.el9_7.1" epoch="0" arch="i686" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>libsss_simpleifp-2.9.7-4.el9_7.1.i686.rpm</filename>
          <sum type="sha256">d694356a68c2a18673b28aca8941371679398b273d9e1553c80c955bec72b4fe</sum>
        </package>
        <package name="sssd-client" version="2.9.7" release="4.el9_7.1" epoch="0" arch="i686" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>sssd-client-2.9.7-4.el9_7.1.i686.rpm</filename>
          <sum type="sha256">f17b748c7220fae14bcbf7906a4e2700748f4d82614197cd8a67fc3a96b50260</sum>
        </package>
        <package name="libsss_nss_idmap" version="2.9.7" release="4.el9_7.1" epoch="0" arch="i686" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>libsss_nss_idmap-2.9.7-4.el9_7.1.i686.rpm</filename>
          <sum type="sha256">fae6b3dc0adc9dc45a077e9b785e8deef1c35feb85f4a382476f9b011631524c</sum>
        </package>
        <package name="libsss_certmap" version="2.9.7" release="4.el9_7.1" epoch="0" arch="i686" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>libsss_certmap-2.9.7-4.el9_7.1.i686.rpm</filename>
          <sum type="sha256">fb1397d08046592f65e7feedba808282a6efaadb9634e31c761d600504b8ec90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21255</id>
    <title>Moderate: openssl security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-12-01 08:04:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21255" id="RHSA-2025:21255" type="rhsa" title="RHSA-2025:21255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21255.html" id="ALSA-2025:21255" type="self" title="ALSA-2025:21255"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="openssl-libs" version="3.5.1" release="4.el9_7" epoch="1" arch="i686" src="openssl-3.5.1-4.el9_7.src.rpm">
          <filename>openssl-libs-3.5.1-4.el9_7.i686.rpm</filename>
          <sum type="sha256">d67d695098e7f9efff12ca6a48f14b4732161c91929c4b863347b416be7c0cda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21926</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-01 08:01:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21926" id="RHSA-2025:21926" type="rhsa" title="RHSA-2025:21926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39843" id="CVE-2025-39843" type="cve" title="CVE-2025-39843"/>
      <reference href="https://bugzilla.redhat.com/2396941" id="2396941" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21926.html" id="ALSA-2025:21926" type="self" title="ALSA-2025:21926"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.9.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">1344ff719211f4ea286e816b2eac43f622a9dfb76dfc36b9955fa5c13f90353c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22175</id>
    <title>Important: expat security update</title>
    <issued date="2025-11-26 00:00:00"/>
    <updated date="2025-12-03 12:07:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22175" id="RHSA-2025:22175" type="rhsa" title="RHSA-2025:22175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22175.html" id="ALSA-2025:22175" type="self" title="ALSA-2025:22175"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="expat" version="2.5.0" release="5.el9_7.1" epoch="0" arch="i686" src="expat-2.5.0-5.el9_7.1.src.rpm">
          <filename>expat-2.5.0-5.el9_7.1.i686.rpm</filename>
          <sum type="sha256">6d9a042a6957716b9593135291208e1e957db3072a40fa92147a7cc5a0e8d839</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22376</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-03 12:03:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22376" id="RHSA-2025:22376" type="rhsa" title="RHSA-2025:22376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9714" id="CVE-2025-9714" type="cve" title="CVE-2025-9714"/>
      <reference href="https://bugzilla.redhat.com/2392605" id="2392605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22376.html" id="ALSA-2025:22376" type="self" title="ALSA-2025:22376"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libxml2" version="2.9.13" release="14.el9_7" epoch="0" arch="i686" src="libxml2-2.9.13-14.el9_7.src.rpm">
          <filename>libxml2-2.9.13-14.el9_7.i686.rpm</filename>
          <sum type="sha256">1d04f05f018b769f2d21e3e8273abda35af03651316a3b3186762536240d797c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22405</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-08 12:21:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22405" id="RHSA-2025:22405" type="rhsa" title="RHSA-2025:22405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39864" id="CVE-2025-39864" type="cve" title="CVE-2025-39864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396934" id="2396934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22405.html" id="ALSA-2025:22405" type="self" title="ALSA-2025:22405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.11.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">5ac14553f538e7a973fb5f756eae03d9e1734123e3531faabc3f019b1bce59d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22660</id>
    <title>Moderate: systemd security update</title>
    <issued date="2025-12-03 00:00:00"/>
    <updated date="2025-12-04 13:25:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.  

Security Fix(es):  

  * systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22660" id="RHSA-2025:22660" type="rhsa" title="RHSA-2025:22660"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4598" id="CVE-2025-4598" type="cve" title="CVE-2025-4598"/>
      <reference href="https://bugzilla.redhat.com/2369242" id="2369242" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22660.html" id="ALSA-2025:22660" type="self" title="ALSA-2025:22660"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="systemd" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="i686" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-252-55.el9_7.7.alma.1.i686.rpm</filename>
          <sum type="sha256">6aca984de93c305f408d71ef40f41f633496aceb9bf1beedef4ae8dae86afb3b</sum>
        </package>
        <package name="systemd-container" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="i686" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-container-252-55.el9_7.7.alma.1.i686.rpm</filename>
          <sum type="sha256">8f3dbe32de7382509b3069f71e64095753aa3ee01222356ef5407359ad35ef71</sum>
        </package>
        <package name="systemd-rpm-macros" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="noarch" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-rpm-macros-252-55.el9_7.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">9a984fdefda4084159a8b20fc5f3455dbadc73d46d14cdc6fb9c7f9d37a113a6</sum>
        </package>
        <package name="systemd-libs" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="i686" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-libs-252-55.el9_7.7.alma.1.i686.rpm</filename>
          <sum type="sha256">c47342939c180c8f7865ee67c48fb469e1bd77e26c6034e37dc9f747d977b78f</sum>
        </package>
        <package name="rhel-net-naming-sysattrs" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="noarch" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>rhel-net-naming-sysattrs-252-55.el9_7.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">d5acde7bf97e84532cca5d92f8e0154ee43290fd504bfe9113145b92337ca361</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22865</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-17 11:46:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22865" id="RHSA-2025:22865" type="rhsa" title="RHSA-2025:22865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22865.html" id="ALSA-2025:22865" type="self" title="ALSA-2025:22865"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.13.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">4c03463f28de5622a46c3d932ac46b08199a02eefe2824633573e3ebae011f9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23241</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:29:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23241" id="RHSA-2025:23241" type="rhsa" title="RHSA-2025:23241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23241.html" id="ALSA-2025:23241" type="self" title="ALSA-2025:23241"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.16.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">c495c01bba08b25eadd05fe5e43be3c98c46f6bea2b307c1b92dbde452ad055f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23342</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:45:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23342" id="RHSA-2025:23342" type="rhsa" title="RHSA-2025:23342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5642" id="CVE-2024-5642" type="cve" title="CVE-2024-5642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6069" id="CVE-2025-6069" type="cve" title="CVE-2025-6069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2294682" id="2294682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373234" id="2373234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23342.html" id="ALSA-2025:23342" type="self" title="ALSA-2025:23342"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-libs" version="3.9.25" release="2.el9_7" epoch="0" arch="i686" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python3-libs-3.9.25-2.el9_7.i686.rpm</filename>
          <sum type="sha256">3f794243955773bde0fb2f8441072441b6bd7721bdb4827306435f2d4880e033</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23343</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:47:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23343" id="RHSA-2025:23343" type="rhsa" title="RHSA-2025:23343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23343.html" id="ALSA-2025:23343" type="self" title="ALSA-2025:23343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="binutils" version="2.35.2" release="67.el9_7.1" epoch="0" arch="i686" src="binutils-2.35.2-67.el9_7.1.src.rpm">
          <filename>binutils-2.35.2-67.el9_7.1.i686.rpm</filename>
          <sum type="sha256">bff53ba8f14ee962cb76a47b83ee90c5dbacd34fbb2be676a4e15560fee2c3f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23483</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 19:54:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23483" id="RHSA-2025:23483" type="rhsa" title="RHSA-2025:23483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5987" id="CVE-2025-5987" type="cve" title="CVE-2025-5987"/>
      <reference href="https://bugzilla.redhat.com/2376219" id="2376219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23483.html" id="ALSA-2025:23483" type="self" title="ALSA-2025:23483"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libssh-config" version="0.10.4" release="17.el9_7" epoch="0" arch="noarch" src="libssh-0.10.4-17.el9_7.src.rpm">
          <filename>libssh-config-0.10.4-17.el9_7.noarch.rpm</filename>
          <sum type="sha256">b21f4eb91c20107571aaaffd480f4176edc36969421c3cfcd512b56067e30147</sum>
        </package>
        <package name="libssh" version="0.10.4" release="17.el9_7" epoch="0" arch="i686" src="libssh-0.10.4-17.el9_7.src.rpm">
          <filename>libssh-0.10.4-17.el9_7.i686.rpm</filename>
          <sum type="sha256">c030d541beb10abf762c9b9cc280f4bcdd44db0373a1d80152c5eea882af7838</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2627</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-14 09:32:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605)
  * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (CVE-2024-50264)
  * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302)
  * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)
  * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)
  * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2627" id="RHSA-2025:2627" type="rhsa" title="RHSA-2025:2627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52605" id="CVE-2023-52605" type="cve" title="CVE-2023-52605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52922" id="CVE-2023-52922" type="cve" title="CVE-2023-52922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50264" id="CVE-2024-50264" type="cve" title="CVE-2024-50264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50302" id="CVE-2024-50302" type="cve" title="CVE-2024-50302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53113" id="CVE-2024-53113" type="cve" title="CVE-2024-53113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53197" id="CVE-2024-53197" type="cve" title="CVE-2024-53197"/>
      <reference href="https://bugzilla.redhat.com/2268295" id="2268295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327168" id="2327168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327169" id="2327169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329370" id="2329370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329924" id="2329924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334412" id="2334412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2627.html" id="ALSA-2025:2627" type="self" title="ALSA-2025:2627"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.31.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">962dd2c7c24e082c2ddb54ded5592262fd0760c31d7e0879c73cfccccb73c6a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2679</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-03-12 00:00:00"/>
    <updated date="2025-03-13 07:22:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2679" id="RHSA-2025:2679" type="rhsa" title="RHSA-2025:2679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56171" id="CVE-2024-56171" type="cve" title="CVE-2024-56171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24928" id="CVE-2025-24928" type="cve" title="CVE-2025-24928"/>
      <reference href="https://bugzilla.redhat.com/2346416" id="2346416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346421" id="2346421" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2679.html" id="ALSA-2025:2679" type="self" title="ALSA-2025:2679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="libxml2" version="2.9.13" release="6.el9_5.2" epoch="0" arch="i686" src="libxml2-2.9.13-6.el9_5.2.src.rpm">
          <filename>libxml2-2.9.13-6.el9_5.2.i686.rpm</filename>
          <sum type="sha256">da9ac6021151ac642a836c5d4fe37d2f857a4f42bb828c6fca48792d7ee6824b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2867</id>
    <title>Important: grub2 security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-21 12:17:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: net: Out-of-bounds write in grub_net_search_config_file() (CVE-2025-0624)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2867" id="RHSA-2025:2867" type="rhsa" title="RHSA-2025:2867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0624" id="CVE-2025-0624" type="cve" title="CVE-2025-0624"/>
      <reference href="https://bugzilla.redhat.com/2346112" id="2346112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2867.html" id="ALSA-2025:2867" type="self" title="ALSA-2025:2867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="grub2-pc-modules" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">0f74115758e957bee223401d6917e78a8ead8c693314e0887d7a8198446b4dd4</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">1a9a4a1379668ed0d7f554b4e2a8cbd2b954a08b4041aa5602f8aa7cd13d7fd7</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">2b8277db740e7dfc5f4dac537b11d639716c651fcca3bdf326211cba5fdea01e</sum>
        </package>
        <package name="grub2-common" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-common-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">cb4d2188428045a3d5209257b77b6eeade01a2fd140b18cb2df21d8cee944ca4</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">d8d666c7b9a5a5ffb5e4a5c736b7ddecded4038deae492881c90f5ff39f76d7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3531</id>
    <title>Moderate: expat security update</title>
    <issued date="2025-04-02 00:00:00"/>
    <updated date="2025-04-02 22:20:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3531" id="RHSA-2025:3531" type="rhsa" title="RHSA-2025:3531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8176" id="CVE-2024-8176" type="cve" title="CVE-2024-8176"/>
      <reference href="https://bugzilla.redhat.com/2310137" id="2310137" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3531.html" id="ALSA-2025:3531" type="self" title="ALSA-2025:3531"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="expat" version="2.5.0" release="3.el9_5.3" epoch="0" arch="i686" src="expat-2.5.0-3.el9_5.3.src.rpm">
          <filename>expat-2.5.0-3.el9_5.3.i686.rpm</filename>
          <sum type="sha256">b606c0dddf97e6e6a34256aa400fda3dfdb9ced53fddb7fd934304feb5ca1e02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3937</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-21 08:27:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3937" id="RHSA-2025:3937" type="rhsa" title="RHSA-2025:3937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53150" id="CVE-2024-53150" type="cve" title="CVE-2024-53150"/>
      <reference href="https://bugzilla.redhat.com/2333971" id="2333971" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3937.html" id="ALSA-2025:3937" type="self" title="ALSA-2025:3937"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-503.38.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">d30600d71036f4521e69a47c70d96569f7f93ceaed413174e3577f7d2a9004b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4244</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-04-28 00:00:00"/>
    <updated date="2025-04-28 19:47:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4244" id="RHSA-2025:4244" type="rhsa" title="RHSA-2025:4244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395"/>
      <reference href="https://bugzilla.redhat.com/2339460" id="2339460" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4244.html" id="ALSA-2025:4244" type="self" title="ALSA-2025:4244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_5_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_5_default</name>
        <package name="glibc" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="i686" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-2.34-125.el9_5.8.alma.1.i686.rpm</filename>
          <sum type="sha256">28bc1088e39483d145849e8804c5a0f2524faeb4f76631ae46c41100f40e08b9</sum>
        </package>
        <package name="glibc-gconv-extra" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="i686" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-gconv-extra-2.34-125.el9_5.8.alma.1.i686.rpm</filename>
          <sum type="sha256">3baac77b88c53eeeddf2c04c4cb6f9c79df622da5581e61d5335a3374acfdc37</sum>
        </package>
        <package name="libnsl" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="i686" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>libnsl-2.34-125.el9_5.8.alma.1.i686.rpm</filename>
          <sum type="sha256">7f4d1552b6036c49028db959f82fc0bc30773cd7ed0a62c3906da0e2388f4dc5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:6977</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:51:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:6977" id="RHSA-2025:6977" type="rhsa" title="RHSA-2025:6977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-6977.html" id="ALSA-2025:6977" type="self" title="ALSA-2025:6977"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="python3-libs" version="3.9.21" release="2.el9" epoch="0" arch="i686" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-libs-3.9.21-2.el9.i686.rpm</filename>
          <sum type="sha256">a28ea5e4b232f7426a1b05debc2f6056476e7d6bf1b99e4d5fe75a3d18e2cee3</sum>
        </package>
        <package name="python3" version="3.9.21" release="2.el9" epoch="0" arch="i686" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-3.9.21-2.el9.i686.rpm</filename>
          <sum type="sha256">b0c1a087b430556f2e5d7d5d64e072bc6d087cd6b4e3f71504ea81bf30e7e1ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:6990</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:49:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774)
  * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775)
  * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)
  * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)
  * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783)
  * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)
  * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (CVE-2025-0677)
  * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:6990" id="RHSA-2025:6990" type="rhsa" title="RHSA-2025:6990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45774" id="CVE-2024-45774" type="cve" title="CVE-2024-45774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45775" id="CVE-2024-45775" type="cve" title="CVE-2024-45775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45776" id="CVE-2024-45776" type="cve" title="CVE-2024-45776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45781" id="CVE-2024-45781" type="cve" title="CVE-2024-45781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45783" id="CVE-2024-45783" type="cve" title="CVE-2024-45783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0622" id="CVE-2025-0622" type="cve" title="CVE-2025-0622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0677" id="CVE-2025-0677" type="cve" title="CVE-2025-0677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0690" id="CVE-2025-0690" type="cve" title="CVE-2025-0690"/>
      <reference href="https://bugzilla.redhat.com/2337461" id="2337461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337481" id="2337481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339182" id="2339182" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345857" id="2345857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345863" id="2345863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345865" id="2345865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346116" id="2346116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346123" id="2346123" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-6990.html" id="ALSA-2025:6990" type="self" title="ALSA-2025:6990"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="grub2-common" version="2.06" release="104.el9_6.alma.1" epoch="1" arch="noarch" src="grub2-2.06-104.el9_6.alma.1.src.rpm">
          <filename>grub2-common-2.06-104.el9_6.alma.1.noarch.rpm</filename>
          <sum type="sha256">1db378d2ed0d8b601c7b94d3ac146440a8d8253e164f72bac16da9a99f78fe5e</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.06" release="104.el9_6.alma.1" epoch="1" arch="noarch" src="grub2-2.06-104.el9_6.alma.1.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-104.el9_6.alma.1.noarch.rpm</filename>
          <sum type="sha256">92f048f9cea6b4c565acd01e73c54b7faead2255addbbb8da22ab8e038ea89cd</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="104.el9_6.alma.1" epoch="1" arch="noarch" src="grub2-2.06-104.el9_6.alma.1.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-104.el9_6.alma.1.noarch.rpm</filename>
          <sum type="sha256">ad4079a764915af6c7598e2ecadc65c22b07333c21c739970d2cb4b18e790c14</sum>
        </package>
        <package name="grub2-pc-modules" version="2.06" release="104.el9_6.alma.1" epoch="1" arch="noarch" src="grub2-2.06-104.el9_6.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-104.el9_6.alma.1.noarch.rpm</filename>
          <sum type="sha256">ef2c38771e51097d02737e395037f0b09108048252a159a94d4fb2eaa64c5b08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7043</id>
    <title>Moderate: microcode_ctl security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:47:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>microcode_ctl security update</summary>
    <description>The microcode_ctl packages provide microcode updates for Intel and AMD processors.  

Security Fix(es):  

  * microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047)
  * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279)
  * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7043" id="RHSA-2025:7043" type="rhsa" title="RHSA-2025:7043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28047" id="CVE-2024-28047" type="cve" title="CVE-2024-28047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31157" id="CVE-2024-31157" type="cve" title="CVE-2024-31157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39279" id="CVE-2024-39279" type="cve" title="CVE-2024-39279"/>
      <reference href="https://bugzilla.redhat.com/2345363" id="2345363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345381" id="2345381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345421" id="2345421" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7043.html" id="ALSA-2025:7043" type="self" title="ALSA-2025:7043"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="microcode_ctl" version="20250211" release="1.el9_6" epoch="4" arch="noarch" src="microcode_ctl-20250211-1.el9_6.src.rpm">
          <filename>microcode_ctl-20250211-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">e9ee981e2cb12b3e11104458751afab3d3ee42d4d6fa5188724375669751d321</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7049</id>
    <title>Moderate: python-requests security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:46:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-requests security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * requests: subsequent requests to the same host ignore cert verification (CVE-2024-35195)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7049" id="RHSA-2025:7049" type="rhsa" title="RHSA-2025:7049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35195" id="CVE-2024-35195" type="cve" title="CVE-2024-35195"/>
      <reference href="https://bugzilla.redhat.com/2282114" id="2282114" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7049.html" id="ALSA-2025:7049" type="self" title="ALSA-2025:7049"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="python3-requests" version="2.25.1" release="9.el9" epoch="0" arch="noarch" src="python-requests-2.25.1-9.el9.src.rpm">
          <filename>python3-requests-2.25.1-9.el9.noarch.rpm</filename>
          <sum type="sha256">d0d399b82614eb9897de475d8198bfb5f2619ced822811ae4aa797a38658e842</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7067</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:40:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: overflow when calculating ulog block size (CVE-2025-24528)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7067" id="RHSA-2025:7067" type="rhsa" title="RHSA-2025:7067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24528" id="CVE-2025-24528" type="cve" title="CVE-2025-24528"/>
      <reference href="https://bugzilla.redhat.com/2342796" id="2342796" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7067.html" id="ALSA-2025:7067" type="self" title="ALSA-2025:7067"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libkadm5" version="1.21.1" release="6.el9" epoch="0" arch="i686" src="krb5-1.21.1-6.el9.src.rpm">
          <filename>libkadm5-1.21.1-6.el9.i686.rpm</filename>
          <sum type="sha256">4cfe43da07a19f4561e9508df20baa1cf4595e8ed90bef249058868bc1c0f7a5</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="6.el9" epoch="0" arch="i686" src="krb5-1.21.1-6.el9.src.rpm">
          <filename>krb5-server-1.21.1-6.el9.i686.rpm</filename>
          <sum type="sha256">7a4ab5e95b82eb578d8f4c41acc028a47b4d1e608a22769e8708bf5d5a172d4e</sum>
        </package>
        <package name="krb5-pkinit" version="1.21.1" release="6.el9" epoch="0" arch="i686" src="krb5-1.21.1-6.el9.src.rpm">
          <filename>krb5-pkinit-1.21.1-6.el9.i686.rpm</filename>
          <sum type="sha256">82a8f0f5782d2785f31defb06fd6b03b30d73cd4d3ba236c93a1b36aa8a75d2b</sum>
        </package>
        <package name="krb5-libs" version="1.21.1" release="6.el9" epoch="0" arch="i686" src="krb5-1.21.1-6.el9.src.rpm">
          <filename>krb5-libs-1.21.1-6.el9.i686.rpm</filename>
          <sum type="sha256">904ee44e125283a3c55875f5c4c1123e871d9289ab6d09575f4969e26b92ba96</sum>
        </package>
        <package name="krb5-server-ldap" version="1.21.1" release="6.el9" epoch="0" arch="i686" src="krb5-1.21.1-6.el9.src.rpm">
          <filename>krb5-server-ldap-1.21.1-6.el9.i686.rpm</filename>
          <sum type="sha256">e52a9f87dbc3cb097068b46e6f9d37683f6456db520101c1d6e8f9eb0ec89143</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7076</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:39:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7076" id="RHSA-2025:7076" type="rhsa" title="RHSA-2025:7076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12243" id="CVE-2024-12243" type="cve" title="CVE-2024-12243"/>
      <reference href="https://bugzilla.redhat.com/2344615" id="2344615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7076.html" id="ALSA-2025:7076" type="self" title="ALSA-2025:7076"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="gnutls" version="3.8.3" release="6.el9" epoch="0" arch="i686" src="gnutls-3.8.3-6.el9.src.rpm">
          <filename>gnutls-3.8.3-6.el9.i686.rpm</filename>
          <sum type="sha256">eb0a069ff9a70010095dfe34977362e18656fd3ba7fdab36bbc7d5bdcd671373</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7077</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:37:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  

Security Fix(es):  

  * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7077" id="RHSA-2025:7077" type="rhsa" title="RHSA-2025:7077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12133" id="CVE-2024-12133" type="cve" title="CVE-2024-12133"/>
      <reference href="https://bugzilla.redhat.com/2344611" id="2344611" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7077.html" id="ALSA-2025:7077" type="self" title="ALSA-2025:7077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libtasn1" version="4.16.0" release="9.el9" epoch="0" arch="i686" src="libtasn1-4.16.0-9.el9.src.rpm">
          <filename>libtasn1-4.16.0-9.el9.i686.rpm</filename>
          <sum type="sha256">a4852e17f9bf297f2d8986d721656867de120a0866f4f5d04a54fff8879a8305</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7423</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-24 22:28:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)
  * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7423" id="RHSA-2025:7423" type="rhsa" title="RHSA-2025:7423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58007" id="CVE-2024-58007" type="cve" title="CVE-2024-58007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21927" id="CVE-2025-21927" type="cve" title="CVE-2025-21927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21993" id="CVE-2025-21993" type="cve" title="CVE-2025-21993"/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348565" id="2348565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356593" id="2356593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356908" id="2356908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7423.html" id="ALSA-2025:7423" type="self" title="ALSA-2025:7423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.16.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">84906bcd6cf93df06be55b96c5b36603d6483e92de3f64f34add3b3f6f3f6c7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7437</id>
    <title>Moderate: avahi security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:23:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.  

Security Fix(es):  

  * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7437" id="RHSA-2025:7437" type="rhsa" title="RHSA-2025:7437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52616" id="CVE-2024-52616" type="cve" title="CVE-2024-52616"/>
      <reference href="https://bugzilla.redhat.com/2326429" id="2326429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7437.html" id="ALSA-2025:7437" type="self" title="ALSA-2025:7437"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="avahi-libs" version="0.8" release="22.el9_6" epoch="0" arch="i686" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-libs-0.8-22.el9_6.i686.rpm</filename>
          <sum type="sha256">108c22dfcc9b27ceb9b828760858680b3f37cee34e654540bb4619e019b111d5</sum>
        </package>
        <package name="avahi" version="0.8" release="22.el9_6" epoch="0" arch="i686" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-0.8-22.el9_6.i686.rpm</filename>
          <sum type="sha256">d6ac740e5146bf7d0c8fe674050b5bda9805a418d2007c09a0ea280a6a189cec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7440</id>
    <title>Low: vim security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:19:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: use-after-free in function ins_compl_get_exp in vim/vim (CVE-2023-4752)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7440" id="RHSA-2025:7440" type="rhsa" title="RHSA-2025:7440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4752" id="CVE-2023-4752" type="cve" title="CVE-2023-4752"/>
      <reference href="https://bugzilla.redhat.com/2237311" id="2237311" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7440.html" id="ALSA-2025:7440" type="self" title="ALSA-2025:7440"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="22.el9_6" epoch="2" arch="noarch" src="vim-8.2.2637-22.el9_6.src.rpm">
          <filename>vim-filesystem-8.2.2637-22.el9_6.noarch.rpm</filename>
          <sum type="sha256">5092c1f882ce83967e120557825057124cdb8cbd3d1b9d13a8049ca6bdb01d10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7444</id>
    <title>Moderate: expat security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:16:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7444" id="RHSA-2025:7444" type="rhsa" title="RHSA-2025:7444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8176" id="CVE-2024-8176" type="cve" title="CVE-2024-8176"/>
      <reference href="https://bugzilla.redhat.com/2310137" id="2310137" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7444.html" id="ALSA-2025:7444" type="self" title="ALSA-2025:7444"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="expat" version="2.5.0" release="5.el9_6" epoch="0" arch="i686" src="expat-2.5.0-5.el9_6.src.rpm">
          <filename>expat-2.5.0-5.el9_6.i686.rpm</filename>
          <sum type="sha256">4eb137632636e34b9b5a6179b097f228d248b8dcf430fa42a55f81e7218655f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7903</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-26 08:50:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
  * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7903" id="RHSA-2025:7903" type="rhsa" title="RHSA-2025:7903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21756" id="CVE-2025-21756" type="cve" title="CVE-2025-21756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21966" id="CVE-2025-21966" type="cve" title="CVE-2025-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://bugzilla.redhat.com/2348609" id="2348609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356605" id="2356605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7903.html" id="ALSA-2025:7903" type="self" title="ALSA-2025:7903"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.17.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">ed07863e4c2f77143e464fc8c4a378decd9e7f6cb5510cc70f447810944f8787</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8142</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-28 13:38:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8142" id="RHSA-2025:8142" type="rhsa" title="RHSA-2025:8142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21964" id="CVE-2025-21964" type="cve" title="CVE-2025-21964"/>
      <reference href="https://bugzilla.redhat.com/2356665" id="2356665" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8142.html" id="ALSA-2025:8142" type="self" title="ALSA-2025:8142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.18.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">6ffe697903f2c6169e98716897c744440c0876877a457b48f3c1dc92ccb452da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8333</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-07-02 12:04:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424)
  * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8333" id="RHSA-2025:8333" type="rhsa" title="RHSA-2025:8333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3424" id="CVE-2022-3424" type="cve" title="CVE-2022-3424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21764" id="CVE-2025-21764" type="cve" title="CVE-2025-21764"/>
      <reference href="https://bugzilla.redhat.com/2132640" id="2132640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348575" id="2348575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8333.html" id="ALSA-2025:8333" type="self" title="ALSA-2025:8333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.19.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">4e8b254f9168b51a2562c68cf0b9cefa40f30cfc16770fa232d8af977e16fcbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8643</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-12 13:36:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)
  * kernel: vlan: enforce underlying device type (CVE-2025-21920)
  * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)
  * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)
  * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)
  * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8643" id="RHSA-2025:8643" type="rhsa" title="RHSA-2025:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21920" id="CVE-2025-21920" type="cve" title="CVE-2025-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21926" id="CVE-2025-21926" type="cve" title="CVE-2025-21926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21997" id="CVE-2025-21997" type="cve" title="CVE-2025-21997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22055" id="CVE-2025-22055" type="cve" title="CVE-2025-22055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37785" id="CVE-2025-37785" type="cve" title="CVE-2025-37785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37943" id="CVE-2025-37943" type="cve" title="CVE-2025-37943"/>
      <reference href="https://bugzilla.redhat.com/2356587" id="2356587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356639" id="2356639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357143" id="2357143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360300" id="2360300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360921" id="2360921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367748" id="2367748" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8643.html" id="ALSA-2025:8643" type="self" title="ALSA-2025:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.21.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">1d52868b230da44c6e012cfbd6194f3a59bb10e3a1d166fe8a39b0ed7e13410c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8655</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-10 08:32:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8655" id="RHSA-2025:8655" type="rhsa" title="RHSA-2025:8655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802"/>
      <reference href="https://bugzilla.redhat.com/2367468" id="2367468" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8655.html" id="ALSA-2025:8655" type="self" title="ALSA-2025:8655"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libnsl" version="2.34" release="168.el9_6.19" epoch="0" arch="i686" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>libnsl-2.34-168.el9_6.19.i686.rpm</filename>
          <sum type="sha256">4e28226729e08983714ac7e97fbee8a75c13d8d040f17492936f2dcc66417427</sum>
        </package>
        <package name="glibc" version="2.34" release="168.el9_6.19" epoch="0" arch="i686" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-2.34-168.el9_6.19.i686.rpm</filename>
          <sum type="sha256">55ba5b891e690e40932afcc4659cc68964ad7c98155f4218058ad4b0640a9d97</sum>
        </package>
        <package name="glibc-gconv-extra" version="2.34" release="168.el9_6.19" epoch="0" arch="i686" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-gconv-extra-2.34-168.el9_6.19.i686.rpm</filename>
          <sum type="sha256">73d38785f07f9dfd7db2aa8bfb0a7e0ac21aca1ebe4ab46022d25ea42f9a1284</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9080</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:20:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
  * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)
  * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)
  * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)
  * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)
  * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
  * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9080" id="RHSA-2025:9080" type="rhsa" title="RHSA-2025:9080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21961" id="CVE-2025-21961" type="cve" title="CVE-2025-21961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21963" id="CVE-2025-21963" type="cve" title="CVE-2025-21963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21969" id="CVE-2025-21969" type="cve" title="CVE-2025-21969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21979" id="CVE-2025-21979" type="cve" title="CVE-2025-21979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21999" id="CVE-2025-21999" type="cve" title="CVE-2025-21999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22126" id="CVE-2025-22126" type="cve" title="CVE-2025-22126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37750" id="CVE-2025-37750" type="cve" title="CVE-2025-37750"/>
      <reference href="https://bugzilla.redhat.com/2356584" id="2356584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356633" id="2356633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356642" id="2356642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356652" id="2356652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357134" id="2357134" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360236" id="2360236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363341" id="2363341" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9080.html" id="ALSA-2025:9080" type="self" title="ALSA-2025:9080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.22.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">5e4a853771b7f21f2041969eb9858e224fd9416fbb3bb05ca48b8a89c9fb9b10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9302</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:45:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
  * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
  * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)
  * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
  * kernel: ext4: ignore xattrs past end (CVE-2025-37738)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9302" id="RHSA-2025:9302" type="rhsa" title="RHSA-2025:9302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21883" id="CVE-2025-21883" type="cve" title="CVE-2025-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21919" id="CVE-2025-21919" type="cve" title="CVE-2025-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22104" id="CVE-2025-22104" type="cve" title="CVE-2025-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23150" id="CVE-2025-23150" type="cve" title="CVE-2025-23150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37738" id="CVE-2025-37738" type="cve" title="CVE-2025-37738"/>
      <reference href="https://bugzilla.redhat.com/2355415" id="2355415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356618" id="2356618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360265" id="2360265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363268" id="2363268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363305" id="2363305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9302.html" id="ALSA-2025:9302" type="self" title="ALSA-2025:9302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.23.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">80f42fa8071b43e6af526350db35f5a5dc7afb69ca5c56dc9e3890cc45b3f920</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9430</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:17:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions (CVE-2025-3576)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9430" id="RHSA-2025:9430" type="rhsa" title="RHSA-2025:9430"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3576" id="CVE-2025-3576" type="cve" title="CVE-2025-3576"/>
      <reference href="https://bugzilla.redhat.com/2359465" id="2359465" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9430.html" id="ALSA-2025:9430" type="self" title="ALSA-2025:9430"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libkadm5" version="1.21.1" release="8.el9_6" epoch="0" arch="i686" src="krb5-1.21.1-8.el9_6.src.rpm">
          <filename>libkadm5-1.21.1-8.el9_6.i686.rpm</filename>
          <sum type="sha256">4566c101d834e0e59770a59ec408d8ef118cbeb42b1aa6ca4a1e03fa0620ee76</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="8.el9_6" epoch="0" arch="i686" src="krb5-1.21.1-8.el9_6.src.rpm">
          <filename>krb5-server-1.21.1-8.el9_6.i686.rpm</filename>
          <sum type="sha256">8861ac32097f1cb56fd4140073e3f27f430168b8c0b2d45e6c33959379a647c3</sum>
        </package>
        <package name="krb5-server-ldap" version="1.21.1" release="8.el9_6" epoch="0" arch="i686" src="krb5-1.21.1-8.el9_6.src.rpm">
          <filename>krb5-server-ldap-1.21.1-8.el9_6.i686.rpm</filename>
          <sum type="sha256">9e9595327e179a0bec19f9968e17f758855dc5b9fd3fd16601e753d4f810727f</sum>
        </package>
        <package name="krb5-libs" version="1.21.1" release="8.el9_6" epoch="0" arch="i686" src="krb5-1.21.1-8.el9_6.src.rpm">
          <filename>krb5-libs-1.21.1-8.el9_6.i686.rpm</filename>
          <sum type="sha256">b4e56c6b18dada36390cfc17a94ff2d2300f1d2319d58337c5d6fdb35889aaa5</sum>
        </package>
        <package name="krb5-pkinit" version="1.21.1" release="8.el9_6" epoch="0" arch="i686" src="krb5-1.21.1-8.el9_6.src.rpm">
          <filename>krb5-pkinit-1.21.1-8.el9_6.i686.rpm</filename>
          <sum type="sha256">d60ca29c11342462cadd13808fe5a6ec0c7783a580dcad40f0c212d2d9009267</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9431</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:14:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9431" id="RHSA-2025:9431" type="rhsa" title="RHSA-2025:9431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-25724" id="CVE-2025-25724" type="cve" title="CVE-2025-25724"/>
      <reference href="https://bugzilla.redhat.com/2349221" id="2349221" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9431.html" id="ALSA-2025:9431" type="self" title="ALSA-2025:9431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="libarchive" version="3.5.3" release="5.el9_6" epoch="0" arch="i686" src="libarchive-3.5.3-5.el9_6.src.rpm">
          <filename>libarchive-3.5.3-5.el9_6.i686.rpm</filename>
          <sum type="sha256">67c9b19ec5cb9a209f2a2a631db11f5067ee0573bd0c0aa9d2039c0637fe80a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9526</id>
    <title>Important: pam security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-26 18:29:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9526" id="RHSA-2025:9526" type="rhsa" title="RHSA-2025:9526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6020" id="CVE-2025-6020" type="cve" title="CVE-2025-6020"/>
      <reference href="https://bugzilla.redhat.com/2372512" id="2372512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9526.html" id="ALSA-2025:9526" type="self" title="ALSA-2025:9526"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="pam" version="1.5.1" release="25.el9_6" epoch="0" arch="i686" src="pam-1.5.1-25.el9_6.src.rpm">
          <filename>pam-1.5.1-25.el9_6.i686.rpm</filename>
          <sum type="sha256">19a999a0c663b184d6001aca597af01ea2b87f256914cd82372ff7b8b9cd0520</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9877</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-06-30 12:51:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Vector register overwrite bug in glibc (CVE-2025-5702)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9877" id="RHSA-2025:9877" type="rhsa" title="RHSA-2025:9877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5702" id="CVE-2025-5702" type="cve" title="CVE-2025-5702"/>
      <reference href="https://bugzilla.redhat.com/2370472" id="2370472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9877.html" id="ALSA-2025:9877" type="self" title="ALSA-2025:9877"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="glibc-gconv-extra" version="2.34" release="168.el9_6.20" epoch="0" arch="i686" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-gconv-extra-2.34-168.el9_6.20.i686.rpm</filename>
          <sum type="sha256">35e59d463d95b05cdd68b07db2db64530cb3aebb2898ea9c63821e213af8ab5a</sum>
        </package>
        <package name="libnsl" version="2.34" release="168.el9_6.20" epoch="0" arch="i686" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>libnsl-2.34-168.el9_6.20.i686.rpm</filename>
          <sum type="sha256">45b79994497721f8bacfbf2edd5a4aaafb05505f4535bf459f86564dd49a151d</sum>
        </package>
        <package name="glibc" version="2.34" release="168.el9_6.20" epoch="0" arch="i686" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-2.34-168.el9_6.20.i686.rpm</filename>
          <sum type="sha256">bca0e91401b93ac250108449616dd06b1d970111dffd8e00237c642f1fac711a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-02 07:27:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9880" id="RHSA-2025:9880" type="rhsa" title="RHSA-2025:9880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52933" id="CVE-2023-52933" type="cve" title="CVE-2023-52933"/>
      <reference href="https://bugzilla.redhat.com/2355476" id="2355476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9880.html" id="ALSA-2025:9880" type="self" title="ALSA-2025:9880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_6_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_6_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-570.24.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">2de9e23988ed650f9199c4b39516bf30afab3666b92bfc2056ca13deb8b8bed0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0238</id>
    <title>Important: libpng security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-07 21:36:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)
  * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0238" id="RHSA-2026:0238" type="rhsa" title="RHSA-2026:0238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66293" id="CVE-2025-66293" type="cve" title="CVE-2025-66293"/>
      <reference href="https://bugzilla.redhat.com/2416904" id="2416904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416907" id="2416907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418711" id="2418711" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0238.html" id="ALSA-2026:0238" type="self" title="ALSA-2026:0238"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libpng" version="1.6.37" release="12.el9_7.1" epoch="2" arch="i686" src="libpng-1.6.37-12.el9_7.1.src.rpm">
          <filename>libpng-1.6.37-12.el9_7.1.i686.rpm</filename>
          <sum type="sha256">d7f3129b8eb4a493b4e4b5987d1f349c8daf68d2c13434e4301b8da70d0be054</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0312</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-01-08 00:00:00"/>
    <updated date="2026-01-16 15:40:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
  * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0312" id="RHSA-2026:0312" type="rhsa" title="RHSA-2026:0312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58436" id="CVE-2025-58436" type="cve" title="CVE-2025-58436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61915" id="CVE-2025-61915" type="cve" title="CVE-2025-61915"/>
      <reference href="https://bugzilla.redhat.com/2416039" id="2416039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416040" id="2416040" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0312.html" id="ALSA-2026:0312" type="self" title="ALSA-2026:0312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="cups-libs" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="i686" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-libs-2.3.3op2-34.el9_7.2.i686.rpm</filename>
          <sum type="sha256">56c6949bfe32bca51324851b182ded032f16f202bb40ef86f6a5fe2f1087ce08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0445</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:31:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0445" id="RHSA-2026:0445" type="rhsa" title="RHSA-2026:0445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0445.html" id="ALSA-2026:0445" type="self" title="ALSA-2026:0445"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.20.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">5d3c5c07b5ded1d8aa5c42f6636833835ff5bfbcaca14b0bacd3514d89cbd246</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0793</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 13:21:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703)
  * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)
  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0793" id="RHSA-2026:0793" type="rhsa" title="RHSA-2026:0793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38703" id="CVE-2025-38703" type="cve" title="CVE-2025-38703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39933" id="CVE-2025-39933" type="cve" title="CVE-2025-39933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2393157" id="2393157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401432" id="2401432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0793.html" id="ALSA-2026:0793" type="self" title="ALSA-2026:0793"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.24.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">408f0b9b8cc70c93fccf501aa480ffc63725311bc4c75929f836fc3fd95ccc57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0936</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-24 01:44:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0936" id="RHSA-2026:0936" type="rhsa" title="RHSA-2026:0936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0936.html" id="ALSA-2026:0936" type="self" title="ALSA-2026:0936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="glib2" version="2.68.4" release="18.el9_7.1" epoch="0" arch="i686" src="glib2-2.68.4-18.el9_7.1.src.rpm">
          <filename>glib2-2.68.4-18.el9_7.1.i686.rpm</filename>
          <sum type="sha256">33d1f4ff1baa55ceb58081a78e0eee29d2c6a7568621d05e00ccefdfddf39a56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1087</id>
    <title>Important: python-urllib3 security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-27 08:19:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1087" id="RHSA-2026:1087" type="rhsa" title="RHSA-2026:1087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1087.html" id="ALSA-2026:1087" type="self" title="ALSA-2026:1087"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-urllib3" version="1.26.5" release="6.el9_7.1" epoch="0" arch="noarch" src="python-urllib3-1.26.5-6.el9_7.1.src.rpm">
          <filename>python3-urllib3-1.26.5-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">1f6a57fe55bf2a7398b564c473af5496d51cc020729d76ea54ee7decbe6750a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10949</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:38:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10949" id="RHSA-2026:10949" type="rhsa" title="RHSA-2026:10949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10949.html" id="ALSA-2026:10949" type="self" title="ALSA-2026:10949"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-libs" version="3.9.25" release="3.el9_7.3" epoch="0" arch="i686" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-libs-3.9.25-3.el9_7.3.i686.rpm</filename>
          <sum type="sha256">9df5b7867729f59b878b5db479489c2a9ba5282f0db35e450a64adae0fb896e6</sum>
        </package>
        <package name="python3" version="3.9.25" release="3.el9_7.3" epoch="0" arch="i686" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-3.9.25-3.el9_7.3.i686.rpm</filename>
          <sum type="sha256">eb3c53dbd45e67a95cf9a2bc901130dd63cb5a0367ad350f17cf26e3c8092144</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1143</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-30 09:51:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141)
  * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)
  * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)
  * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1143" id="RHSA-2026:1143" type="rhsa" title="RHSA-2026:1143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38141" id="CVE-2025-38141" type="cve" title="CVE-2025-38141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38349" id="CVE-2025-38349" type="cve" title="CVE-2025-38349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38731" id="CVE-2025-38731" type="cve" title="CVE-2025-38731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40294" id="CVE-2025-40294" type="cve" title="CVE-2025-40294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68305" id="CVE-2025-68305" type="cve" title="CVE-2025-68305"/>
      <reference href="https://bugzilla.redhat.com/2376052" id="2376052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2381870" id="2381870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393488" id="2393488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419891" id="2419891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422840" id="2422840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1143.html" id="ALSA-2026:1143" type="self" title="ALSA-2026:1143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.26.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">9b2e129a76d5a2257c2d4b3b745e7baaf89d68c6a4a186a59590d123ba328644</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11510</id>
    <title>Important: vim security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-29 10:04:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11510" id="RHSA-2026:11510" type="rhsa" title="RHSA-2026:11510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34982" id="CVE-2026-34982" type="cve" title="CVE-2026-34982"/>
      <reference href="https://bugzilla.redhat.com/2455400" id="2455400" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11510.html" id="ALSA-2026:11510" type="self" title="ALSA-2026:11510"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="23.el9_7.3" epoch="2" arch="noarch" src="vim-8.2.2637-23.el9_7.3.src.rpm">
          <filename>vim-filesystem-8.2.2637-23.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">01729bdb451fe8df4c89a3c22cfecc04b41c8a409a867619b99e2c8007d68a2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12441</id>
    <title>Important: libcap security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-05-01 06:44:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libcap security update</summary>
    <description>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  

Security Fix(es):  

  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12441" id="RHSA-2026:12441" type="rhsa" title="RHSA-2026:12441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4878" id="CVE-2026-4878" type="cve" title="CVE-2026-4878"/>
      <reference href="https://bugzilla.redhat.com/2451615" id="2451615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-12441.html" id="ALSA-2026:12441" type="self" title="ALSA-2026:12441"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libcap" version="2.48" release="10.el9_7.1" epoch="0" arch="i686" src="libcap-2.48-10.el9_7.1.src.rpm">
          <filename>libcap-2.48-10.el9_7.1.i686.rpm</filename>
          <sum type="sha256">e39d335c485e1320ee204508da69db825aaa44f7b54db5a1778bb4373d869ead</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1350</id>
    <title>Moderate: curl security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:31:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.  

Security Fix(es):  

  * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1350" id="RHSA-2026:1350" type="rhsa" title="RHSA-2026:1350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9086" id="CVE-2025-9086" type="cve" title="CVE-2025-9086"/>
      <reference href="https://bugzilla.redhat.com/2394750" id="2394750" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1350.html" id="ALSA-2026:1350" type="self" title="ALSA-2026:1350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="35.el9_7.3" epoch="0" arch="i686" src="curl-7.76.1-35.el9_7.3.src.rpm">
          <filename>libcurl-minimal-7.76.1-35.el9_7.3.i686.rpm</filename>
          <sum type="sha256">6e9693f95de4ce36ba673b9dc813272859324b110693f57819e646bcfd03f7e9</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="35.el9_7.3" epoch="0" arch="i686" src="curl-7.76.1-35.el9_7.3.src.rpm">
          <filename>libcurl-7.76.1-35.el9_7.3.i686.rpm</filename>
          <sum type="sha256">a6c8693d194eba4aec389fa4db4e51f1877a458ad4c1e862004cfabda722b201</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13565</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-07 00:12:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13565" id="RHSA-2026:13565" type="rhsa" title="RHSA-2026:13565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23136" id="CVE-2026-23136" type="cve" title="CVE-2026-23136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/2439852" id="2439852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13565.html" id="ALSA-2026:13565" type="self" title="ALSA-2026:13565"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.54.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">1a2354da934c7dd41a84a6a3665a03a6e078be291001fdfc761c46ddd4a09aef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13677</id>
    <title>Moderate: systemd security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-05 19:25:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.  

Security Fix(es):  

  * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13677" id="RHSA-2026:13677" type="rhsa" title="RHSA-2026:13677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29111" id="CVE-2026-29111" type="cve" title="CVE-2026-29111"/>
      <reference href="https://bugzilla.redhat.com/2450505" id="2450505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13677.html" id="ALSA-2026:13677" type="self" title="ALSA-2026:13677"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="rhel-net-naming-sysattrs" version="252" release="55.el9_7.9.alma.1" epoch="0" arch="noarch" src="systemd-252-55.el9_7.9.alma.1.src.rpm">
          <filename>rhel-net-naming-sysattrs-252-55.el9_7.9.alma.1.noarch.rpm</filename>
          <sum type="sha256">7d209f52bfd401e6ddb7dbdbbd022a5f0e650cb14dc3df5420f1b00fe4c921e8</sum>
        </package>
        <package name="systemd-rpm-macros" version="252" release="55.el9_7.9.alma.1" epoch="0" arch="noarch" src="systemd-252-55.el9_7.9.alma.1.src.rpm">
          <filename>systemd-rpm-macros-252-55.el9_7.9.alma.1.noarch.rpm</filename>
          <sum type="sha256">8ab20c4557d90755ea3020b890c972b9dc9fe0a973c24148fced6dcbd02c3830</sum>
        </package>
        <package name="systemd-container" version="252" release="55.el9_7.9.alma.1" epoch="0" arch="i686" src="systemd-252-55.el9_7.9.alma.1.src.rpm">
          <filename>systemd-container-252-55.el9_7.9.alma.1.i686.rpm</filename>
          <sum type="sha256">ab0dfdfb230fc71f22af67eecfa405eb8fb2e0ea1df1c9eb591dc9cda9bc2b97</sum>
        </package>
        <package name="systemd" version="252" release="55.el9_7.9.alma.1" epoch="0" arch="i686" src="systemd-252-55.el9_7.9.alma.1.src.rpm">
          <filename>systemd-252-55.el9_7.9.alma.1.i686.rpm</filename>
          <sum type="sha256">b792a3fd7f31570add9b567dcd37dae9e81d8ad04ebd82009186a41e57b93768</sum>
        </package>
        <package name="systemd-libs" version="252" release="55.el9_7.9.alma.1" epoch="0" arch="i686" src="systemd-252-55.el9_7.9.alma.1.src.rpm">
          <filename>systemd-libs-252-55.el9_7.9.alma.1.i686.rpm</filename>
          <sum type="sha256">e9d71f1218cd3046d704e2843cfbe4a096837cc09cca06801c9f8427767d49e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1473</id>
    <title>Important: openssl security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-02-02 11:12:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187)
  * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467)
  * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468)
  * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469)
  * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199)
  * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
  * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418)
  * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419)
  * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
  * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
  * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
  * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1473" id="RHSA-2026:1473" type="rhsa" title="RHSA-2026:1473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11187" id="CVE-2025-11187" type="cve" title="CVE-2025-11187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15467" id="CVE-2025-15467" type="cve" title="CVE-2025-15467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15468" id="CVE-2025-15468" type="cve" title="CVE-2025-15468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15469" id="CVE-2025-15469" type="cve" title="CVE-2025-15469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66199" id="CVE-2025-66199" type="cve" title="CVE-2025-66199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68160" id="CVE-2025-68160" type="cve" title="CVE-2025-68160"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69418" id="CVE-2025-69418" type="cve" title="CVE-2025-69418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69419" id="CVE-2025-69419" type="cve" title="CVE-2025-69419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69420" id="CVE-2025-69420" type="cve" title="CVE-2025-69420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69421" id="CVE-2025-69421" type="cve" title="CVE-2025-69421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22795" id="CVE-2026-22795" type="cve" title="CVE-2026-22795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22796" id="CVE-2026-22796" type="cve" title="CVE-2026-22796"/>
      <reference href="https://bugzilla.redhat.com/2430375" id="2430375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430376" id="2430376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430377" id="2430377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430378" id="2430378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430379" id="2430379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430380" id="2430380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430381" id="2430381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430386" id="2430386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430387" id="2430387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430388" id="2430388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430389" id="2430389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430390" id="2430390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1473.html" id="ALSA-2026:1473" type="self" title="ALSA-2026:1473"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="openssl-libs" version="3.5.1" release="7.el9_7" epoch="1" arch="i686" src="openssl-3.5.1-7.el9_7.src.rpm">
          <filename>openssl-libs-3.5.1-7.el9_7.i686.rpm</filename>
          <sum type="sha256">254e3e799bd3b2823acab88629fd4fc206e8414fb2606f71e3e1742ab3113db7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1478</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-01-28 19:56:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1478" id="RHSA-2026:1478" type="rhsa" title="RHSA-2026:1478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1478.html" id="ALSA-2026:1478" type="self" title="ALSA-2026:1478"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-libs" version="3.9.25" release="3.el9_7" epoch="0" arch="i686" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python3-libs-3.9.25-3.el9_7.i686.rpm</filename>
          <sum type="sha256">ba4c6b709234b1f8867fb7290c4d60f83a7e2493b2c5dfedfa0011eaed391330</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:14791</id>
    <title>Moderate: libpng security update</title>
    <issued date="2026-05-07 00:00:00"/>
    <updated date="2026-05-13 08:43:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:14791" id="RHSA-2026:14791" type="rhsa" title="RHSA-2026:14791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://bugzilla.redhat.com/2451819" id="2451819" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-14791.html" id="ALSA-2026:14791" type="self" title="ALSA-2026:14791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libpng" version="1.6.37" release="12.el9_7.3" epoch="2" arch="i686" src="libpng-1.6.37-12.el9_7.3.src.rpm">
          <filename>libpng-1.6.37-12.el9_7.3.i686.rpm</filename>
          <sum type="sha256">5ee8bc18bd1e625ac4e8660b73283a4dd6be9b1cdf9f6269176a6c371801d4d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15971</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15971" id="RHSA-2026:15971" type="rhsa" title="RHSA-2026:15971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-15971.html" id="ALSA-2026:15971" type="self" title="ALSA-2026:15971"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="glib2" version="2.68.4" release="18.el9_7.2" epoch="0" arch="i686" src="glib2-2.68.4-18.el9_7.2.src.rpm">
          <filename>glib2-2.68.4-18.el9_7.2.i686.rpm</filename>
          <sum type="sha256">9814eacb854f55c699c868369c618f456609d1084db36caa8d89cf6c0b0abb96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-06 08:24:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1617" id="RHSA-2026:1617" type="rhsa" title="RHSA-2026:1617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38568" id="CVE-2025-38568" type="cve" title="CVE-2025-38568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40251" id="CVE-2025-40251" type="cve" title="CVE-2025-40251"/>
      <reference href="https://bugzilla.redhat.com/2389507" id="2389507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418892" id="2418892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1617.html" id="ALSA-2026:1617" type="self" title="ALSA-2026:1617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.27.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">237f99e0bd7c92de963630678a17869cc50e5eb606049b1c4aeb5bb2490b8cb5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16206</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-12 00:00:00"/>
    <updated date="2026-05-20 00:50:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16206" id="RHSA-2026:16206" type="rhsa" title="RHSA-2026:16206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-16206.html" id="ALSA-2026:16206" type="self" title="ALSA-2026:16206"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.55.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">55eaf2c811be58c786b4871f0cec68d955ff46038e53201e986993c2ef5cef9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16693</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-13 00:00:00"/>
    <updated date="2026-05-14 08:55:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16693" id="RHSA-2026:16693" type="rhsa" title="RHSA-2026:16693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-16693.html" id="ALSA-2026:16693" type="self" title="ALSA-2026:16693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="jq" version="1.6" release="19.el9_7.0.2" epoch="0" arch="i686" src="jq-1.6-19.el9_7.0.2.src.rpm">
          <filename>jq-1.6-19.el9_7.0.2.i686.rpm</filename>
          <sum type="sha256">38391f044dd07933211413a6a489330ffb60556d742e312790947b0ef91eb0db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18028</id>
    <title>Moderate: libpng security update</title>
    <issued date="2026-05-18 00:00:00"/>
    <updated date="2026-05-18 17:08:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18028" id="RHSA-2026:18028" type="rhsa" title="RHSA-2026:18028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18028.html" id="ALSA-2026:18028" type="self" title="ALSA-2026:18028"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libpng" version="1.6.37" release="12.el9_7.4" epoch="2" arch="i686" src="libpng-1.6.37-12.el9_7.4.src.rpm">
          <filename>libpng-1.6.37-12.el9_7.4.i686.rpm</filename>
          <sum type="sha256">b0bde90bfe67a1e8512b2f1bd61b8e589521fe68fbd2d15afe16e231421b2be8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18587</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-06-07 18:33:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105)
  * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
  * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
  * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
  * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
  * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
  * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400)
  * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
  * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
  * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
  * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
  * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
  * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
  * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18587" id="RHSA-2026:18587" type="rhsa" title="RHSA-2026:18587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22105" id="CVE-2025-22105" type="cve" title="CVE-2025-22105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37980" id="CVE-2025-37980" type="cve" title="CVE-2025-37980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38015" id="CVE-2025-38015" type="cve" title="CVE-2025-38015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38097" id="CVE-2025-38097" type="cve" title="CVE-2025-38097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38166" id="CVE-2025-38166" type="cve" title="CVE-2025-38166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38279" id="CVE-2025-38279" type="cve" title="CVE-2025-38279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38400" id="CVE-2025-38400" type="cve" title="CVE-2025-38400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38405" id="CVE-2025-38405" type="cve" title="CVE-2025-38405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38441" id="CVE-2025-38441" type="cve" title="CVE-2025-38441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38470" id="CVE-2025-38470" type="cve" title="CVE-2025-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39866" id="CVE-2025-39866" type="cve" title="CVE-2025-39866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40134" id="CVE-2025-40134" type="cve" title="CVE-2025-40134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23040" id="CVE-2026-23040" type="cve" title="CVE-2026-23040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23243" id="CVE-2026-23243" type="cve" title="CVE-2026-23243"/>
      <reference href="https://bugzilla.redhat.com/2360247" id="2360247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367614" id="2367614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373343" id="2373343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376060" id="2376060" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376065" id="2376065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379178" id="2379178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383397" id="2383397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383399" id="2383399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383478" id="2383478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383906" id="2383906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396940" id="2396940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414468" id="2414468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436806" id="2436806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448594" id="2448594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18587.html" id="ALSA-2026:18587" type="self" title="ALSA-2026:18587"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.5.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">7cc6ba668fe84b65be6c6546f2d8607dfc2a0b0e8648796abd22babb6b360301</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18597</id>
    <title>Low: NetworkManager security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:33:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * networkmanagr: NetworkManager File Access (CVE-2025-9615)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18597" id="RHSA-2026:18597" type="rhsa" title="RHSA-2026:18597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9615" id="CVE-2025-9615" type="cve" title="CVE-2025-9615"/>
      <reference href="https://bugzilla.redhat.com/2391503" id="2391503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18597.html" id="ALSA-2026:18597" type="self" title="ALSA-2026:18597"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="NetworkManager-initscripts-updown" version="1.54.3" release="2.el9" epoch="1" arch="noarch" src="NetworkManager-1.54.3-2.el9.src.rpm">
          <filename>NetworkManager-initscripts-updown-1.54.3-2.el9.noarch.rpm</filename>
          <sum type="sha256">33ee26cd9a7199d20f69a5d553d58500d18d989ff2310fd4325dd39ca949d077</sum>
        </package>
        <package name="NetworkManager-libnm" version="1.54.3" release="2.el9" epoch="1" arch="i686" src="NetworkManager-1.54.3-2.el9.src.rpm">
          <filename>NetworkManager-libnm-1.54.3-2.el9.i686.rpm</filename>
          <sum type="sha256">607f64069a7bff80b338d87e2fbf1ce038aa1996e131159791d292842f6f2fa5</sum>
        </package>
        <package name="NetworkManager-config-server" version="1.54.3" release="2.el9" epoch="1" arch="noarch" src="NetworkManager-1.54.3-2.el9.src.rpm">
          <filename>NetworkManager-config-server-1.54.3-2.el9.noarch.rpm</filename>
          <sum type="sha256">e1021afed802f593f8ae449517087d5823e1e1fdc9fbed3858053718b055130a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18599</id>
    <title>Moderate: p11-kit security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>p11-kit security update</summary>
    <description>The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.  

Security Fix(es):  

  * p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18599" id="RHSA-2026:18599" type="rhsa" title="RHSA-2026:18599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2100" id="CVE-2026-2100" type="cve" title="CVE-2026-2100"/>
      <reference href="https://bugzilla.redhat.com/2437308" id="2437308" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18599.html" id="ALSA-2026:18599" type="self" title="ALSA-2026:18599"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="p11-kit" version="0.26.2" release="1.el9" epoch="0" arch="i686" src="p11-kit-0.26.2-1.el9.src.rpm">
          <filename>p11-kit-0.26.2-1.el9.i686.rpm</filename>
          <sum type="sha256">b3d20f8f452da2f142f0effce0eee931aaff7ee5d6edffc06d685220413fbc5e</sum>
        </package>
        <package name="p11-kit-trust" version="0.26.2" release="1.el9" epoch="0" arch="i686" src="p11-kit-0.26.2-1.el9.src.rpm">
          <filename>p11-kit-trust-0.26.2-1.el9.i686.rpm</filename>
          <sum type="sha256">ca9814c66069a4fc6b615608d8246c55c9ff77b09fdc366130d78fe2dedccf9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18683</id>
    <title>Moderate: libssh security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351)
  * libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878)
  * libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877)
  * libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114)
  * libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277)
  * libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)
  * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)
  * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)
  * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)
  * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18683" id="RHSA-2026:18683" type="rhsa" title="RHSA-2026:18683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4877" id="CVE-2025-4877" type="cve" title="CVE-2025-4877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4878" id="CVE-2025-4878" type="cve" title="CVE-2025-4878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5351" id="CVE-2025-5351" type="cve" title="CVE-2025-5351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8114" id="CVE-2025-8114" type="cve" title="CVE-2025-8114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8277" id="CVE-2025-8277" type="cve" title="CVE-2025-8277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0964" id="CVE-2026-0964" type="cve" title="CVE-2026-0964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0965" id="CVE-2026-0965" type="cve" title="CVE-2026-0965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0966" id="CVE-2026-0966" type="cve" title="CVE-2026-0966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0967" id="CVE-2026-0967" type="cve" title="CVE-2026-0967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0968" id="CVE-2026-0968" type="cve" title="CVE-2026-0968"/>
      <reference href="https://bugzilla.redhat.com/2369367" id="2369367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376184" id="2376184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376193" id="2376193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383220" id="2383220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383888" id="2383888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2433121" id="2433121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436979" id="2436979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436980" id="2436980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436981" id="2436981" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436982" id="2436982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18683.html" id="ALSA-2026:18683" type="self" title="ALSA-2026:18683"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libssh" version="0.10.4" release="18.el9" epoch="0" arch="i686" src="libssh-0.10.4-18.el9.src.rpm">
          <filename>libssh-0.10.4-18.el9.i686.rpm</filename>
          <sum type="sha256">13095e4f8ada0c6a3f6eaf6ae7ff6407838daeac25d4c4760fe0475f188b5226</sum>
        </package>
        <package name="libssh-config" version="0.10.4" release="18.el9" epoch="0" arch="noarch" src="libssh-0.10.4-18.el9.src.rpm">
          <filename>libssh-config-0.10.4-18.el9.noarch.rpm</filename>
          <sum type="sha256">7330cdae173ed5151e36fa6a59a51ccf183102daa3bb599f1b37e35a090bbe48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1913</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 07:54:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1913" id="RHSA-2026:1913" type="rhsa" title="RHSA-2026:1913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1913.html" id="ALSA-2026:1913" type="self" title="ALSA-2026:1913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libsmartcols" version="2.37.4" release="21.el9_7" epoch="0" arch="i686" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libsmartcols-2.37.4-21.el9_7.i686.rpm</filename>
          <sum type="sha256">4f183483c1f6d1f4a6e7bea504d792b214ca7e676fffc90cf6f80de619420c09</sum>
        </package>
        <package name="libmount" version="2.37.4" release="21.el9_7" epoch="0" arch="i686" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libmount-2.37.4-21.el9_7.i686.rpm</filename>
          <sum type="sha256">6e0f13f012307e5db6f73d41b3079b665e6df77ac60a91532fc128074ea2d565</sum>
        </package>
        <package name="libblkid" version="2.37.4" release="21.el9_7" epoch="0" arch="i686" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libblkid-2.37.4-21.el9_7.i686.rpm</filename>
          <sum type="sha256">9f31e1501f4b32e3f1f17538cc37d1fbb8bb0648a175baf71ca23d469d3c7577</sum>
        </package>
        <package name="libfdisk" version="2.37.4" release="21.el9_7" epoch="0" arch="i686" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libfdisk-2.37.4-21.el9_7.i686.rpm</filename>
          <sum type="sha256">badcdb3a5689eeb625c4062a74b71157d53b0b9d0afcb79681793ab2b42aee02</sum>
        </package>
        <package name="libuuid" version="2.37.4" release="21.el9_7" epoch="0" arch="i686" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libuuid-2.37.4-21.el9_7.i686.rpm</filename>
          <sum type="sha256">cb73bc8e9e454c75a8a862258f02a7453bb7906eef92dbcc35514ff2130f8321</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19213</id>
    <title>Moderate: systemd security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:34:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.  

Security Fix(es):  

  * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19213" id="RHSA-2026:19213" type="rhsa" title="RHSA-2026:19213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29111" id="CVE-2026-29111" type="cve" title="CVE-2026-29111"/>
      <reference href="https://bugzilla.redhat.com/2450505" id="2450505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19213.html" id="ALSA-2026:19213" type="self" title="ALSA-2026:19213"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="systemd-rpm-macros" version="252" release="67.el9_8.2.alma.1" epoch="0" arch="noarch" src="systemd-252-67.el9_8.2.alma.1.src.rpm">
          <filename>systemd-rpm-macros-252-67.el9_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">45ae149910a729b3be6057ad61b329e8cf0e38cce1bfd1de92686341a93e350d</sum>
        </package>
        <package name="rhel-net-naming-sysattrs" version="252" release="67.el9_8.2.alma.1" epoch="0" arch="noarch" src="systemd-252-67.el9_8.2.alma.1.src.rpm">
          <filename>rhel-net-naming-sysattrs-252-67.el9_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">8a3cc315ecce4c74c19ecf7b437b6f02d225824a5414773c847fdd1773c6f72f</sum>
        </package>
        <package name="systemd" version="252" release="67.el9_8.2.alma.1" epoch="0" arch="i686" src="systemd-252-67.el9_8.2.alma.1.src.rpm">
          <filename>systemd-252-67.el9_8.2.alma.1.i686.rpm</filename>
          <sum type="sha256">8c23cac4c00cfb9b665541e890ef82e575a1accbc5836d405c6b3d39d54dd855</sum>
        </package>
        <package name="systemd-libs" version="252" release="67.el9_8.2.alma.1" epoch="0" arch="i686" src="systemd-252-67.el9_8.2.alma.1.src.rpm">
          <filename>systemd-libs-252-67.el9_8.2.alma.1.i686.rpm</filename>
          <sum type="sha256">aef5264adb3151e673462897160df87cf4edb2bddba18518a29b6d59dffe15f9</sum>
        </package>
        <package name="systemd-container" version="252" release="67.el9_8.2.alma.1" epoch="0" arch="i686" src="systemd-252-67.el9_8.2.alma.1.src.rpm">
          <filename>systemd-container-252-67.el9_8.2.alma.1.i686.rpm</filename>
          <sum type="sha256">ec85896e445d7483e9f11d4ec7d0da7dd1fab2c029e302e0fd68010aead9cf13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19216</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19216" id="RHSA-2026:19216" type="rhsa" title="RHSA-2026:19216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19216.html" id="ALSA-2026:19216" type="self" title="ALSA-2026:19216"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3" version="3.9.25" release="7.el9_8" epoch="0" arch="i686" src="python3.9-3.9.25-7.el9_8.src.rpm">
          <filename>python3-3.9.25-7.el9_8.i686.rpm</filename>
          <sum type="sha256">60a60de45a6a3864abd3eb4d5977afff34f6e1ec31fe081866028e9cbd62f704</sum>
        </package>
        <package name="python3-libs" version="3.9.25" release="7.el9_8" epoch="0" arch="i686" src="python3.9-3.9.25-7.el9_8.src.rpm">
          <filename>python3-libs-3.9.25-7.el9_8.i686.rpm</filename>
          <sum type="sha256">860886c00c08724052cd871ad641e1abcbaaad9fa29d9e3ffb9208d17128002a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19218</id>
    <title>Moderate: openssl security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19218" id="RHSA-2026:19218" type="rhsa" title="RHSA-2026:19218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31790" id="CVE-2026-31790" type="cve" title="CVE-2026-31790"/>
      <reference href="https://bugzilla.redhat.com/2451094" id="2451094" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19218.html" id="ALSA-2026:19218" type="self" title="ALSA-2026:19218"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="openssl-libs" version="3.5.5" release="2.el9_8" epoch="1" arch="i686" src="openssl-3.5.5-2.el9_8.src.rpm">
          <filename>openssl-libs-3.5.5-2.el9_8.i686.rpm</filename>
          <sum type="sha256">6568aa41204dac3c6535a1f26ca053ba2fea62fa3316ca1a6706fd7cab9013f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19224</id>
    <title>Important: vim security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19224" id="RHSA-2026:19224" type="rhsa" title="RHSA-2026:19224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34982" id="CVE-2026-34982" type="cve" title="CVE-2026-34982"/>
      <reference href="https://bugzilla.redhat.com/2455400" id="2455400" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19224.html" id="ALSA-2026:19224" type="self" title="ALSA-2026:19224"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="26.el9_8.4" epoch="2" arch="noarch" src="vim-8.2.2637-26.el9_8.4.src.rpm">
          <filename>vim-filesystem-8.2.2637-26.el9_8.4.noarch.rpm</filename>
          <sum type="sha256">6d54175bf2d77c57d7a78a801befbf053dd262d364310e6ee783b983f3697ac2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19225</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)
  * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677)
  * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19225" id="RHSA-2026:19225" type="rhsa" title="RHSA-2026:19225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23060" id="CVE-2026-23060" type="cve" title="CVE-2026-23060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31677" id="CVE-2026-31677" type="cve" title="CVE-2026-31677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2436779" id="2436779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461763" id="2461763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19225.html" id="ALSA-2026:19225" type="self" title="ALSA-2026:19225"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.5.3.el9_8.noarch.rpm</filename>
          <sum type="sha256">fbcce39b19f8b3cb06e110eb9d1cdb32e6f9b6ba8334b35b7456bc3a64f895a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19346</id>
    <title>Important: libcap security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libcap security update</summary>
    <description>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  

Security Fix(es):  

  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19346" id="RHSA-2026:19346" type="rhsa" title="RHSA-2026:19346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4878" id="CVE-2026-4878" type="cve" title="CVE-2026-4878"/>
      <reference href="https://bugzilla.redhat.com/2451615" id="2451615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19346.html" id="ALSA-2026:19346" type="self" title="ALSA-2026:19346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libcap" version="2.48" release="10.el9_8.1" epoch="0" arch="i686" src="libcap-2.48-10.el9_8.1.src.rpm">
          <filename>libcap-2.48-10.el9_8.1.i686.rpm</filename>
          <sum type="sha256">dd0da64f27ec444a1bc766298ef27b5aedeea5bc0349ba75708a14282454e523</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19357</id>
    <title>Important: krb5 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:31:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)
  * krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19357" id="RHSA-2026:19357" type="rhsa" title="RHSA-2026:19357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40355" id="CVE-2026-40355" type="cve" title="CVE-2026-40355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40356" id="CVE-2026-40356" type="cve" title="CVE-2026-40356"/>
      <reference href="https://bugzilla.redhat.com/2463368" id="2463368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463370" id="2463370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19357.html" id="ALSA-2026:19357" type="self" title="ALSA-2026:19357"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="krb5-pkinit" version="1.21.1" release="10.el9_8" epoch="0" arch="i686" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>krb5-pkinit-1.21.1-10.el9_8.i686.rpm</filename>
          <sum type="sha256">2f8d7414dd6a94ef12f14e0c7b835b99efa4dd572088ad981400b7595eb55ab0</sum>
        </package>
        <package name="libkadm5" version="1.21.1" release="10.el9_8" epoch="0" arch="i686" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>libkadm5-1.21.1-10.el9_8.i686.rpm</filename>
          <sum type="sha256">3515081ab0c56018d5808f848f8ab2d0bd595ea4ea9b6756552ccabe2c086f12</sum>
        </package>
        <package name="krb5-xrealmauthz" version="1.21.1" release="10.el9_8" epoch="0" arch="i686" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>krb5-xrealmauthz-1.21.1-10.el9_8.i686.rpm</filename>
          <sum type="sha256">580819b565dc02312e9fa2837aa98b21f879d98046ea1e23aae175537e638d62</sum>
        </package>
        <package name="krb5-server-ldap" version="1.21.1" release="10.el9_8" epoch="0" arch="i686" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>krb5-server-ldap-1.21.1-10.el9_8.i686.rpm</filename>
          <sum type="sha256">6ca49201f51d65d055ab85e0904fb9d2032adb0ec45d971a2ba8f11cf8539136</sum>
        </package>
        <package name="krb5-libs" version="1.21.1" release="10.el9_8" epoch="0" arch="i686" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>krb5-libs-1.21.1-10.el9_8.i686.rpm</filename>
          <sum type="sha256">9d9bdd04722f1b320f9abb978a25249dc96a065097df040d2d5c21fc6042164d</sum>
        </package>
        <package name="krb5-server" version="1.21.1" release="10.el9_8" epoch="0" arch="i686" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>krb5-server-1.21.1-10.el9_8.i686.rpm</filename>
          <sum type="sha256">a265977acc53082d9ad2642c51cbf813938d37b8ad8a36332ec59abede380399</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19361</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19361" id="RHSA-2026:19361" type="rhsa" title="RHSA-2026:19361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19361.html" id="ALSA-2026:19361" type="self" title="ALSA-2026:19361"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="glib2" version="2.68.4" release="19.el9_8.1" epoch="0" arch="i686" src="glib2-2.68.4-19.el9_8.1.src.rpm">
          <filename>glib2-2.68.4-19.el9_8.1.i686.rpm</filename>
          <sum type="sha256">675fcabca0807d9510d4201cfedf09fc1b84e3658e962b435193565a4efa90d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19365</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19365" id="RHSA-2026:19365" type="rhsa" title="RHSA-2026:19365"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19365.html" id="ALSA-2026:19365" type="self" title="ALSA-2026:19365"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="jq" version="1.6" release="19.el9_8.2" epoch="0" arch="i686" src="jq-1.6-19.el9_8.2.src.rpm">
          <filename>jq-1.6-19.el9_8.2.i686.rpm</filename>
          <sum type="sha256">1f4dd7e661abd0dda2eb1ff439cd33586e9b0e4cd49303d4516524c135bde7a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19366</id>
    <title>Important: python-markdown security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-07-07 11:25:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-markdown security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-markdown: denial of service via malformed HTML-like sequences (CVE-2025-69534)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19366" id="RHSA-2026:19366" type="rhsa" title="RHSA-2026:19366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69534" id="CVE-2025-69534" type="cve" title="CVE-2025-69534"/>
      <reference href="https://bugzilla.redhat.com/2444839" id="2444839" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19366.html" id="ALSA-2026:19366" type="self" title="ALSA-2026:19366"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3-markdown" version="3.3.4" release="4.el9_8.2" epoch="0" arch="noarch" src="python-markdown-3.3.4-4.el9_8.2.src.rpm">
          <filename>python3-markdown-3.3.4-4.el9_8.2.noarch.rpm</filename>
          <sum type="sha256">6d7fce102aa881ee7f4b1e0fbeb5057d46061f86d09d619b540a3f1e0bcf2cb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19568</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-06-07 18:33:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
  * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
  * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CVE-2026-31532)
  * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
  * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
  * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
  * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19568" id="RHSA-2026:19568" type="rhsa" title="RHSA-2026:19568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71116" id="CVE-2025-71116" type="cve" title="CVE-2025-71116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22984" id="CVE-2026-22984" type="cve" title="CVE-2026-22984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22990" id="CVE-2026-22990" type="cve" title="CVE-2026-22990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23136" id="CVE-2026-23136" type="cve" title="CVE-2026-23136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23401" id="CVE-2026-23401" type="cve" title="CVE-2026-23401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31532" id="CVE-2026-31532" type="cve" title="CVE-2026-31532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31607" id="CVE-2026-31607" type="cve" title="CVE-2026-31607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43128" id="CVE-2026-43128" type="cve" title="CVE-2026-43128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43163" id="CVE-2026-43163" type="cve" title="CVE-2026-43163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429602" id="2429602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432389" id="2432389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432400" id="2432400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439852" id="2439852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453803" id="2453803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461107" id="2461107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461521" id="2461521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467059" id="2467059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467144" id="2467144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477015" id="2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477802" id="2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19568.html" id="ALSA-2026:19568" type="self" title="ALSA-2026:19568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.10.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">97399d0b1f56831833d413c3ab516ca4b75b8d2dbe5713d825e7f218537e53f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2042</id>
    <title>Important: brotli security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-05 12:08:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>brotli security update</summary>
    <description>Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.   

Security Fix(es):  

  * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2042" id="RHSA-2026:2042" type="rhsa" title="RHSA-2026:2042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6176" id="CVE-2025-6176" type="cve" title="CVE-2025-6176"/>
      <reference href="https://bugzilla.redhat.com/2408762" id="2408762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2042.html" id="ALSA-2026:2042" type="self" title="ALSA-2026:2042"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libbrotli" version="1.0.9" release="9.el9_7" epoch="0" arch="i686" src="brotli-1.0.9-9.el9_7.src.rpm">
          <filename>libbrotli-1.0.9-9.el9_7.i686.rpm</filename>
          <sum type="sha256">9b81a6e8876a3bd59028563b52e95601641555839be8b5247efd0f9749a0ad78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20597</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-06-30 13:40:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437)
  * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438)
  * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20597" id="RHSA-2026:20597" type="rhsa" title="RHSA-2026:20597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4046" id="CVE-2026-4046" type="cve" title="CVE-2026-4046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4437" id="CVE-2026-4437" type="cve" title="CVE-2026-4437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4438" id="CVE-2026-4438" type="cve" title="CVE-2026-4438"/>
      <reference href="https://bugzilla.redhat.com/2449777" id="2449777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449783" id="2449783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453117" id="2453117" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-20597.html" id="ALSA-2026:20597" type="self" title="ALSA-2026:20597"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="glibc-gconv-extra" version="2.34" release="270.el9_8" epoch="0" arch="i686" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>glibc-gconv-extra-2.34-270.el9_8.i686.rpm</filename>
          <sum type="sha256">2d278b7fce490aec38ad608c5adfb6682a6252a33220bc860240d85a286fb5a8</sum>
        </package>
        <package name="glibc" version="2.34" release="270.el9_8" epoch="0" arch="i686" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>glibc-2.34-270.el9_8.i686.rpm</filename>
          <sum type="sha256">970b0ade8aa673e3d0c01ba0c1c8c6159269c5262dffef4c3b1a21c275751b9b</sum>
        </package>
        <package name="libnsl" version="2.34" release="270.el9_8" epoch="0" arch="i686" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>libnsl-2.34-270.el9_8.i686.rpm</filename>
          <sum type="sha256">fdbce249dfd662ccbc1044426f881b64e597524aa7c9ea7fe58032d626026386</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20612</id>
    <title>Important: gnutls security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-07-02 10:06:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,  
which implements cryptographic algorithms and protocols such as SSL, TLS, and  
DTLS.  

Security Fix(es):  

  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
  * gnutls: Fix crashing on an underflow with a DTLS datagram


(CVE-2026-33845)  

  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
  * gnutls: Fix case-sensitivity of domain name comparison in name


constraints (CVE-2026-3833)  

  * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
  * gnutls: Denial of Service via heap buffer overflow in DTLS handshake


fragment reassembly (CVE-2026-33846)  

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE page(s)  
listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20612" id="RHSA-2026:20612" type="rhsa" title="RHSA-2026:20612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33845" id="CVE-2026-33845" type="cve" title="CVE-2026-33845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33846" id="CVE-2026-33846" type="cve" title="CVE-2026-33846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3832" id="CVE-2026-3832" type="cve" title="CVE-2026-3832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3833" id="CVE-2026-3833" type="cve" title="CVE-2026-3833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42009" id="CVE-2026-42009" type="cve" title="CVE-2026-42009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42010" id="CVE-2026-42010" type="cve" title="CVE-2026-42010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42011" id="CVE-2026-42011" type="cve" title="CVE-2026-42011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42012" id="CVE-2026-42012" type="cve" title="CVE-2026-42012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42013" id="CVE-2026-42013" type="cve" title="CVE-2026-42013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42014" id="CVE-2026-42014" type="cve" title="CVE-2026-42014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42015" id="CVE-2026-42015" type="cve" title="CVE-2026-42015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5260" id="CVE-2026-5260" type="cve" title="CVE-2026-5260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5419" id="CVE-2026-5419" type="cve" title="CVE-2026-5419"/>
      <reference href="https://bugzilla.redhat.com/2445763" id="2445763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450624" id="2450624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450625" id="2450625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467279" id="2467279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467289" id="2467289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467437" id="2467437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-20612.html" id="ALSA-2026:20612" type="self" title="ALSA-2026:20612"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="gnutls" version="3.8.10" release="4.el9_8" epoch="0" arch="i686" src="gnutls-3.8.10-4.el9_8.src.rpm">
          <filename>gnutls-3.8.10-4.el9_8.i686.rpm</filename>
          <sum type="sha256">a07367358c321ebb714d95f9f7a5a2805a55a910908541277240b5a064f2ff2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21468</id>
    <title>Important: cockpit security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-28 10:15:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cockpit security update</summary>
    <description>Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.  

Security Fix(es):  

  * cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI (CVE-2026-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21468" id="RHSA-2026:21468" type="rhsa" title="RHSA-2026:21468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4802" id="CVE-2026-4802" type="cve" title="CVE-2026-4802"/>
      <reference href="https://bugzilla.redhat.com/2451155" id="2451155" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21468.html" id="ALSA-2026:21468" type="self" title="ALSA-2026:21468"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="cockpit-system" version="356.2" release="1.el9_8" epoch="0" arch="noarch" src="cockpit-356.2-1.el9_8.src.rpm">
          <filename>cockpit-system-356.2-1.el9_8.noarch.rpm</filename>
          <sum type="sha256">32eb8395ea33394cd76f313ef1e883287aa2a400cd18cf677ce252283e21f698</sum>
        </package>
        <package name="cockpit-doc" version="356.2" release="1.el9_8" epoch="0" arch="noarch" src="cockpit-356.2-1.el9_8.src.rpm">
          <filename>cockpit-doc-356.2-1.el9_8.noarch.rpm</filename>
          <sum type="sha256">a13363c2a782acbc9c9499ec95b56218995e4abf1ee3bd64f4a12c094a0034d5</sum>
        </package>
        <package name="cockpit-bridge" version="356.2" release="1.el9_8" epoch="0" arch="noarch" src="cockpit-356.2-1.el9_8.src.rpm">
          <filename>cockpit-bridge-356.2-1.el9_8.noarch.rpm</filename>
          <sum type="sha256">d810871229062ae0bb8d717a464a152bc99967c3fb8bfb5f6c848b8c0d2718a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21556</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-06-07 22:24:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
  * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  * kernel: mm/page_alloc: clear page-&gt;private in free_pages_prepare() (CVE-2026-43303)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21556" id="RHSA-2026:21556" type="rhsa" title="RHSA-2026:21556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38653" id="CVE-2025-38653" type="cve" title="CVE-2025-38653"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68183" id="CVE-2025-68183" type="cve" title="CVE-2025-68183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68366" id="CVE-2025-68366" type="cve" title="CVE-2025-68366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68724" id="CVE-2025-68724" type="cve" title="CVE-2025-68724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71089" id="CVE-2025-71089" type="cve" title="CVE-2025-71089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23392" id="CVE-2026-23392" type="cve" title="CVE-2026-23392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23455" id="CVE-2026-23455" type="cve" title="CVE-2026-23455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31408" id="CVE-2026-31408" type="cve" title="CVE-2026-31408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31684" id="CVE-2026-31684" type="cve" title="CVE-2026-31684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31685" id="CVE-2026-31685" type="cve" title="CVE-2026-31685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31709" id="CVE-2026-31709" type="cve" title="CVE-2026-31709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43020" id="CVE-2026-43020" type="cve" title="CVE-2026-43020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43023" id="CVE-2026-43023" type="cve" title="CVE-2026-43023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43027" id="CVE-2026-43027" type="cve" title="CVE-2026-43027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43051" id="CVE-2026-43051" type="cve" title="CVE-2026-43051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43110" id="CVE-2026-43110" type="cve" title="CVE-2026-43110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43158" id="CVE-2026-43158" type="cve" title="CVE-2026-43158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43190" id="CVE-2026-43190" type="cve" title="CVE-2026-43190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43303" id="CVE-2026-43303" type="cve" title="CVE-2026-43303"/>
      <reference href="https://bugzilla.redhat.com/2390372" id="2390372" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422699" id="2422699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424881" id="2424881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424886" id="2424886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429104" id="2429104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451218" id="2451218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454810" id="2454810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455334" id="2455334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461757" id="2461757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461759" id="2461759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464369" id="2464369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464455" id="2464455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464462" id="2464462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464476" id="2464476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464496" id="2464496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467014" id="2467014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467064" id="2467064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467210" id="2467210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468091" id="2468091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21556.html" id="ALSA-2026:21556" type="self" title="ALSA-2026:21556"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">e7fa545268b24f15dcf013ec7c4a06a45fc6e1b390d85329fb1d555333325ad0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2212</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-12 10:34:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)
  * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)
  * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)
  * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2212" id="RHSA-2026:2212" type="rhsa" title="RHSA-2026:2212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37789" id="CVE-2025-37789" type="cve" title="CVE-2025-37789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37819" id="CVE-2025-37819" type="cve" title="CVE-2025-37819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38024" id="CVE-2025-38024" type="cve" title="CVE-2025-38024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38403" id="CVE-2025-38403" type="cve" title="CVE-2025-38403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38415" id="CVE-2025-38415" type="cve" title="CVE-2025-38415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38459" id="CVE-2025-38459" type="cve" title="CVE-2025-38459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38730" id="CVE-2025-38730" type="cve" title="CVE-2025-38730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39760" id="CVE-2025-39760" type="cve" title="CVE-2025-39760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40141" id="CVE-2025-40141" type="cve" title="CVE-2025-40141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40269" id="CVE-2025-40269" type="cve" title="CVE-2025-40269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40318" id="CVE-2025-40318" type="cve" title="CVE-2025-40318"/>
      <reference href="https://bugzilla.redhat.com/2363315" id="2363315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365032" id="2365032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373354" id="2373354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383404" id="2383404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383421" id="2383421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383487" id="2383487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393191" id="2393191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394601" id="2394601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414522" id="2414522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419919" id="2419919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419920" id="2419920" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2212.html" id="ALSA-2026:2212" type="self" title="ALSA-2026:2212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.30.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">4d52218cd8b8cbf5bb6aa626071650d97ab81d01c4f9be4423cce7a88093c86f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22312</id>
    <title>Moderate: openssl security update</title>
    <issued date="2026-06-01 00:00:00"/>
    <updated date="2026-06-03 08:02:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22312" id="RHSA-2026:22312" type="rhsa" title="RHSA-2026:22312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28390" id="CVE-2026-28390" type="cve" title="CVE-2026-28390"/>
      <reference href="https://bugzilla.redhat.com/2456314" id="2456314" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-22312.html" id="ALSA-2026:22312" type="self" title="ALSA-2026:22312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="openssl-libs" version="3.5.5" release="3.el9_8" epoch="1" arch="i686" src="openssl-3.5.5-3.el9_8.src.rpm">
          <filename>openssl-libs-3.5.5-3.el9_8.i686.rpm</filename>
          <sum type="sha256">84896f84caf16f590aaf100762326fa894d0675b2976a2b243f22670797e7ec8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22717</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-06-03 00:00:00"/>
    <updated date="2026-06-04 08:57:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22717" id="RHSA-2026:22717" type="rhsa" title="RHSA-2026:22717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35177" id="CVE-2026-35177" type="cve" title="CVE-2026-35177"/>
      <reference href="https://bugzilla.redhat.com/2455542" id="2455542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-22717.html" id="ALSA-2026:22717" type="self" title="ALSA-2026:22717"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="26.el9_8.5" epoch="2" arch="noarch" src="vim-8.2.2637-26.el9_8.5.src.rpm">
          <filename>vim-filesystem-8.2.2637-26.el9_8.5.noarch.rpm</filename>
          <sum type="sha256">0d0c554dc6f8a09f2160aee3c03ad5745b9aa4e380d2a4c0c2fdd085cc4dd966</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:23230</id>
    <title>Important: expat security update</title>
    <issued date="2026-06-04 00:00:00"/>
    <updated date="2026-06-11 08:52:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: denial of service via crafted XML input (CVE-2026-45186)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:23230" id="RHSA-2026:23230" type="rhsa" title="RHSA-2026:23230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45186" id="CVE-2026-45186" type="cve" title="CVE-2026-45186"/>
      <reference href="https://bugzilla.redhat.com/2468575" id="2468575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-23230.html" id="ALSA-2026:23230" type="self" title="ALSA-2026:23230"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="expat" version="2.5.0" release="6.el9_8.1" epoch="0" arch="i686" src="expat-2.5.0-6.el9_8.1.src.rpm">
          <filename>expat-2.5.0-6.el9_8.1.i686.rpm</filename>
          <sum type="sha256">970cc12828600a1d703a7d263714304c5a49808ccbf375581174a7fbb7d1c5b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24369</id>
    <title>Important: unbound security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 08:53:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944)
  * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959)
  * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24369" id="RHSA-2026:24369" type="rhsa" title="RHSA-2026:24369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33278" id="CVE-2026-33278" type="cve" title="CVE-2026-33278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42944" id="CVE-2026-42944" type="cve" title="CVE-2026-42944"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42959" id="CVE-2026-42959" type="cve" title="CVE-2026-42959"/>
      <reference href="https://bugzilla.redhat.com/2479774" id="2479774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479806" id="2479806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479808" id="2479808" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24369.html" id="ALSA-2026:24369" type="self" title="ALSA-2026:24369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="unbound-libs" version="1.24.2" release="3.el9_8.1" epoch="0" arch="i686" src="unbound-1.24.2-3.el9_8.1.src.rpm">
          <filename>unbound-libs-1.24.2-3.el9_8.1.i686.rpm</filename>
          <sum type="sha256">22138ffb77930a8c5ca873589e61d36f34aac1c120e67ebae0f87dff4863c321</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24381</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 20:37:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
  * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24381" id="RHSA-2026:24381" type="rhsa" title="RHSA-2026:24381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31613" id="CVE-2026-31613" type="cve" title="CVE-2026-31613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31786" id="CVE-2026-31786" type="cve" title="CVE-2026-31786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46243" id="CVE-2026-46243" type="cve" title="CVE-2026-46243"/>
      <reference href="https://bugzilla.redhat.com/2461480" id="2461480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464096" id="2464096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481486" id="2481486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24381.html" id="ALSA-2026:24381" type="self" title="ALSA-2026:24381"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.13.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">5431935cdaba4c362eb47584d3d059e2da4159f7be4e664ec98000c988ea138c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25049</id>
    <title>Critical: samba security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:51:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.  

Security Fix(es):  

  * samba: Missing access check on reparse point operations (CVE-2026-1933)
  * samba: vfs_worm does not block directory modification (CVE-2026-2340)
  * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012)
  * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  * samba: Remote Code Execution in SAMR (CVE-2026-4408)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25049" id="RHSA-2026:25049" type="rhsa" title="RHSA-2026:25049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1933" id="CVE-2026-1933" type="cve" title="CVE-2026-1933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2340" id="CVE-2026-2340" type="cve" title="CVE-2026-2340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3012" id="CVE-2026-3012" type="cve" title="CVE-2026-3012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40170" id="CVE-2026-40170" type="cve" title="CVE-2026-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4408" id="CVE-2026-4408" type="cve" title="CVE-2026-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4480" id="CVE-2026-4480" type="cve" title="CVE-2026-4480"/>
      <reference href="https://bugzilla.redhat.com/2447317" id="2447317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447318" id="2447318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447319" id="2447319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452232" id="2452232" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2459061" id="2459061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479762" id="2479762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25049.html" id="ALSA-2026:25049" type="self" title="ALSA-2026:25049"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="samba-common-libs" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-common-libs-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">0104396112d83551de720cd2a8de5f8bf79ba4df1f1963080aec0714db15927e</sum>
        </package>
        <package name="samba-winbind-modules" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-winbind-modules-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">1b042bee80e5adbee006471e598194ec40b5198766078331cc6f46ce7c79c98e</sum>
        </package>
        <package name="libwbclient" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libwbclient-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">358869971524e3317cbc818033080f5aab6e140b87457e622e317c8b60c52154</sum>
        </package>
        <package name="samba-client-libs" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-client-libs-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">48cffa419fba45da0bb36a94025468ef2f36d5df0bd8d6317558720335188860</sum>
        </package>
        <package name="samba-common" version="4.23.5" release="10.el9_8" epoch="0" arch="noarch" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-common-4.23.5-10.el9_8.noarch.rpm</filename>
          <sum type="sha256">7bd6b22cace4dabe2cac9d0f17735484b6ddbc82b584997c2e3ed4b69fabac21</sum>
        </package>
        <package name="python3-ldb" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>python3-ldb-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">7c1a58ba6587bcaf8089b002c7bb0ef498a846c90d6c1f15a2a4f79238d2a761</sum>
        </package>
        <package name="libldb" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libldb-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">850372ff7b7a16105b191a3f2c686406dcf23d1dbfde35b5c1c11347cab64afc</sum>
        </package>
        <package name="python3-samba" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>python3-samba-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">cf6031dde0ea70639c0bbca6ee56ed7a1b28d0e267f876424eac97844e9b23f0</sum>
        </package>
        <package name="samba-dc-libs" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-dc-libs-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">cfc9f0686d5c821d8c7f9aa95c7a7d92ef9969f7cfbcbc6e3612c6138cd628c1</sum>
        </package>
        <package name="libnetapi" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libnetapi-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">dc033535f288decf5a7d4378f6fb2985eae9f44453a182cda85b3161d9c6aa69</sum>
        </package>
        <package name="samba-libs" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-libs-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">ddcd7f6cc00afb4df9a3a01ad5b312e9475f1fb17fdbd65be5bf0bbed10f607b</sum>
        </package>
        <package name="samba-usershares" version="4.23.5" release="10.el9_8" epoch="0" arch="noarch" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-usershares-4.23.5-10.el9_8.noarch.rpm</filename>
          <sum type="sha256">e9288d23b9cb7ec68c84ac5c7117c46a00af0b431607118f4bd1a8d4daf2b1ac</sum>
        </package>
        <package name="libsmbclient" version="4.23.5" release="10.el9_8" epoch="0" arch="i686" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libsmbclient-4.23.5-10.el9_8.i686.rpm</filename>
          <sum type="sha256">f65c9316e2ce2adc727d3ef7b2990a70e3005c942ae3724b841d2f31aa5210bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25217</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-11 18:23:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)
  * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508)
  * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  * kernel: ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (CVE-2026-43037)
  * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)
  * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
  * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
  * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25217" id="RHSA-2026:25217" type="rhsa" title="RHSA-2026:25217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23216" id="CVE-2026-23216" type="cve" title="CVE-2026-23216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31419" id="CVE-2026-31419" type="cve" title="CVE-2026-31419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31508" id="CVE-2026-31508" type="cve" title="CVE-2026-31508"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31581" id="CVE-2026-31581" type="cve" title="CVE-2026-31581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43037" id="CVE-2026-43037" type="cve" title="CVE-2026-43037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43056" id="CVE-2026-43056" type="cve" title="CVE-2026-43056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43116" id="CVE-2026-43116" type="cve" title="CVE-2026-43116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43125" id="CVE-2026-43125" type="cve" title="CVE-2026-43125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43501" id="CVE-2026-43501" type="cve" title="CVE-2026-43501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45852" id="CVE-2026-45852" type="cve" title="CVE-2026-45852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46181" id="CVE-2026-46181" type="cve" title="CVE-2026-46181"/>
      <reference href="https://bugzilla.redhat.com/2440630" id="2440630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457829" id="2457829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460641" id="2460641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461471" id="2461471" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464351" id="2464351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464449" id="2464449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467005" id="2467005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467234" id="2467234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480457" id="2480457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482166" id="2482166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482532" id="2482532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25217.html" id="ALSA-2026:25217" type="self" title="ALSA-2026:25217"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.15.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">f633a4198ebfffa7fd0f82f3f7b4af9bb5d50268a088339d475c27dfccaa02ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25239</id>
    <title>Important: openssl security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-12 09:45:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383)
  * openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076)
  * openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180)
  * openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181)
  * openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)
  * openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183)
  * openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764)
  * openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766)
  * openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767)
  * openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768)
  * openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769)
  * openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770)
  * openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)
  * openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446)
  * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25239" id="RHSA-2026:25239" type="rhsa" title="RHSA-2026:25239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34180" id="CVE-2026-34180" type="cve" title="CVE-2026-34180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34181" id="CVE-2026-34181" type="cve" title="CVE-2026-34181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34182" id="CVE-2026-34182" type="cve" title="CVE-2026-34182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34183" id="CVE-2026-34183" type="cve" title="CVE-2026-34183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42764" id="CVE-2026-42764" type="cve" title="CVE-2026-42764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42766" id="CVE-2026-42766" type="cve" title="CVE-2026-42766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42767" id="CVE-2026-42767" type="cve" title="CVE-2026-42767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42768" id="CVE-2026-42768" type="cve" title="CVE-2026-42768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42769" id="CVE-2026-42769" type="cve" title="CVE-2026-42769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42770" id="CVE-2026-42770" type="cve" title="CVE-2026-42770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45445" id="CVE-2026-45445" type="cve" title="CVE-2026-45445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45446" id="CVE-2026-45446" type="cve" title="CVE-2026-45446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45447" id="CVE-2026-45447" type="cve" title="CVE-2026-45447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7383" id="CVE-2026-7383" type="cve" title="CVE-2026-7383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9076" id="CVE-2026-9076" type="cve" title="CVE-2026-9076"/>
      <reference href="https://bugzilla.redhat.com/2481879" id="2481879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481880" id="2481880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481881" id="2481881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481882" id="2481882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481884" id="2481884" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481885" id="2481885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481887" id="2481887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481890" id="2481890" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481891" id="2481891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481892" id="2481892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481893" id="2481893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481894" id="2481894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481896" id="2481896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481897" id="2481897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481898" id="2481898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25239.html" id="ALSA-2026:25239" type="self" title="ALSA-2026:25239"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="openssl-libs" version="3.5.5" release="4.el9_8" epoch="1" arch="i686" src="openssl-3.5.5-4.el9_8.src.rpm">
          <filename>openssl-libs-3.5.5-4.el9_8.i686.rpm</filename>
          <sum type="sha256">3cb8f57419f4677d72e87293196556786f6c7f0eb4f1690afc339549f646b41f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2722</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-23 13:18:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
  * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
  * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
  * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)
  * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2722" id="RHSA-2026:2722" type="rhsa" title="RHSA-2026:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53034" id="CVE-2023-53034" type="cve" title="CVE-2023-53034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40064" id="CVE-2025-40064" type="cve" title="CVE-2025-40064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40304" id="CVE-2025-40304" type="cve" title="CVE-2025-40304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40322" id="CVE-2025-40322" type="cve" title="CVE-2025-40322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68349" id="CVE-2025-68349" type="cve" title="CVE-2025-68349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68811" id="CVE-2025-68811" type="cve" title="CVE-2025-68811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22998" id="CVE-2026-22998" type="cve" title="CVE-2026-22998"/>
      <reference href="https://bugzilla.redhat.com/2360239" id="2360239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406747" id="2406747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419870" id="2419870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419902" id="2419902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424880" id="2424880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429116" id="2429116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432671" id="2432671" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2722.html" id="ALSA-2026:2722" type="self" title="ALSA-2026:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.34.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">276e88c0ad0da46d7a7b9e172bffc4b15861ed06d1b1bb1ab44754678898a815</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27789</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 10:13:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
  * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
  * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
  * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
  * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
  * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)
  * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)


Bug Fix(es) and Enhancement(s):  

  * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048)
  * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699)
  * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820)
  * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823)
  * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308)
  * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317)
  * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27789" id="RHSA-2026:27789" type="rhsa" title="RHSA-2026:27789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31474" id="CVE-2026-31474" type="cve" title="CVE-2026-31474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31669" id="CVE-2026-31669" type="cve" title="CVE-2026-31669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31772" id="CVE-2026-31772" type="cve" title="CVE-2026-31772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31787" id="CVE-2026-31787" type="cve" title="CVE-2026-31787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43260" id="CVE-2026-43260" type="cve" title="CVE-2026-43260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43279" id="CVE-2026-43279" type="cve" title="CVE-2026-43279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43414" id="CVE-2026-43414" type="cve" title="CVE-2026-43414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45984" id="CVE-2026-45984" type="cve" title="CVE-2026-45984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46056" id="CVE-2026-46056" type="cve" title="CVE-2026-46056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46117" id="CVE-2026-46117" type="cve" title="CVE-2026-46117"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46125" id="CVE-2026-46125" type="cve" title="CVE-2026-46125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46135" id="CVE-2026-46135" type="cve" title="CVE-2026-46135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46145" id="CVE-2026-46145" type="cve" title="CVE-2026-46145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46152" id="CVE-2026-46152" type="cve" title="CVE-2026-46152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46166" id="CVE-2026-46166" type="cve" title="CVE-2026-46166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46173" id="CVE-2026-46173" type="cve" title="CVE-2026-46173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46331" id="CVE-2026-46331" type="cve" title="CVE-2026-46331"/>
      <reference href="https://bugzilla.redhat.com/2460646" id="2460646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461503" id="2461503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464092" id="2464092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464502" id="2464502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467083" id="2467083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467215" id="2467215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468155" id="2468155" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479492" id="2479492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481922" id="2481922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482181" id="2482181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482563" id="2482563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482576" id="2482576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482581" id="2482581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482608" id="2482608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482634" id="2482634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482645" id="2482645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482654" id="2482654" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-27789.html" id="ALSA-2026:27789" type="self" title="ALSA-2026:27789"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.17.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">0cd2b21fee38f236364fb81b384d8f99e79af2d458555920afebfac27ae1e9a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2786</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:43:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)
  * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)
  * glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory (CVE-2025-15281)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2786" id="RHSA-2026:2786" type="rhsa" title="RHSA-2026:2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15281" id="CVE-2025-15281" type="cve" title="CVE-2025-15281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0861" id="CVE-2026-0861" type="cve" title="CVE-2026-0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0915" id="CVE-2026-0915" type="cve" title="CVE-2026-0915"/>
      <reference href="https://bugzilla.redhat.com/2429771" id="2429771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430201" id="2430201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431196" id="2431196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2786.html" id="ALSA-2026:2786" type="self" title="ALSA-2026:2786"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="glibc" version="2.34" release="231.el9_7.10" epoch="0" arch="i686" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-2.34-231.el9_7.10.i686.rpm</filename>
          <sum type="sha256">0658db5041b44e14d8df0bbc4bf056c2e7e1c06a5869c867f8d229deecd24273</sum>
        </package>
        <package name="libnsl" version="2.34" release="231.el9_7.10" epoch="0" arch="i686" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>libnsl-2.34-231.el9_7.10.i686.rpm</filename>
          <sum type="sha256">7e36ee2eaf44fed4b46e992c5f40451eb4128feb155db388f012344b46cbea86</sum>
        </package>
        <package name="glibc-gconv-extra" version="2.34" release="231.el9_7.10" epoch="0" arch="i686" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-gconv-extra-2.34-231.el9_7.10.i686.rpm</filename>
          <sum type="sha256">9b7788c9dd4d52d920e46c661a1824353bf7ab853bbef117c4f7117702a0aed3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28158</id>
    <title>Important: python-urllib3 security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-25 10:20:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
  * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28158" id="RHSA-2026:28158" type="rhsa" title="RHSA-2026:28158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44431" id="CVE-2026-44431" type="cve" title="CVE-2026-44431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44432" id="CVE-2026-44432" type="cve" title="CVE-2026-44432"/>
      <reference href="https://bugzilla.redhat.com/2477154" id="2477154" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477167" id="2477167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28158.html" id="ALSA-2026:28158" type="self" title="ALSA-2026:28158"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3-urllib3" version="1.26.5" release="8.el9_8" epoch="0" arch="noarch" src="python-urllib3-1.26.5-8.el9_8.src.rpm">
          <filename>python3-urllib3-1.26.5-8.el9_8.noarch.rpm</filename>
          <sum type="sha256">ff9c2c263a5590bfc92171e261ae56c5086ed3083c5f80374a43811bca8ba53a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28209</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-25 10:19:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28209" id="RHSA-2026:28209" type="rhsa" title="RHSA-2026:28209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41411" id="CVE-2026-41411" type="cve" title="CVE-2026-41411"/>
      <reference href="https://bugzilla.redhat.com/2461614" id="2461614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28209.html" id="ALSA-2026:28209" type="self" title="ALSA-2026:28209"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="26.el9_8.6" epoch="2" arch="noarch" src="vim-8.2.2637-26.el9_8.6.src.rpm">
          <filename>vim-filesystem-8.2.2637-26.el9_8.6.noarch.rpm</filename>
          <sum type="sha256">0e1c9d31cacdf2cd9465bbfcb0beb2814f2c5798eedab1ec5d2eab46a7bf0994</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28253</id>
    <title>Low: libtasn1 security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-25 10:13:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  

Security Fix(es):  

  * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28253" id="RHSA-2026:28253" type="rhsa" title="RHSA-2026:28253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13151" id="CVE-2025-13151" type="cve" title="CVE-2025-13151"/>
      <reference href="https://bugzilla.redhat.com/2427698" id="2427698" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28253.html" id="ALSA-2026:28253" type="self" title="ALSA-2026:28253"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libtasn1" version="4.16.0" release="10.el9_8" epoch="0" arch="i686" src="libtasn1-4.16.0-10.el9_8.src.rpm">
          <filename>libtasn1-4.16.0-10.el9_8.i686.rpm</filename>
          <sum type="sha256">c03552a559edfa4a9c4420d6dc7dc79e1821ea9d3aa9bd4db5562fbc7ded3811</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28254</id>
    <title>Low: libxml2 security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-25 10:11:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28254" id="RHSA-2026:28254" type="rhsa" title="RHSA-2026:28254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34459" id="CVE-2024-34459" type="cve" title="CVE-2024-34459"/>
      <reference href="https://bugzilla.redhat.com/2280532" id="2280532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28254.html" id="ALSA-2026:28254" type="self" title="ALSA-2026:28254"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libxml2" version="2.9.13" release="14.el9_8.1" epoch="0" arch="i686" src="libxml2-2.9.13-14.el9_8.1.src.rpm">
          <filename>libxml2-2.9.13-14.el9_8.1.i686.rpm</filename>
          <sum type="sha256">d1e777c84b774046df7b3df0cac90e7f33401b320add11b584933cbc52e7e76b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28255</id>
    <title>Moderate: libpng security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-25 10:22:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
  * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28255" id="RHSA-2026:28255" type="rhsa" title="RHSA-2026:28255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451819" id="2451819" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28255.html" id="ALSA-2026:28255" type="self" title="ALSA-2026:28255"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libpng" version="1.6.37" release="15.el9_8.2" epoch="2" arch="i686" src="libpng-1.6.37-15.el9_8.2.src.rpm">
          <filename>libpng-1.6.37-15.el9_8.2.i686.rpm</filename>
          <sum type="sha256">897e0e88bf76a826af48bf1d697af0643c35707073230e8819ad0d285e965a43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28256</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-26 12:55:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28256" id="RHSA-2026:28256" type="rhsa" title="RHSA-2026:28256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40253" id="CVE-2026-40253" type="cve" title="CVE-2026-40253"/>
      <reference href="https://bugzilla.redhat.com/2459076" id="2459076" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28256.html" id="ALSA-2026:28256" type="self" title="ALSA-2026:28256"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="opencryptoki-libs" version="3.26.0" release="2.el9_8.2" epoch="0" arch="i686" src="opencryptoki-3.26.0-2.el9_8.2.src.rpm">
          <filename>opencryptoki-libs-3.26.0-2.el9_8.2.i686.rpm</filename>
          <sum type="sha256">8d41f5e08fbb7b155044e82ebc1392421394d66fb17da2bf22702af0b319a655</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3066</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:42:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3066" id="RHSA-2026:3066" type="rhsa" title="RHSA-2026:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38129" id="CVE-2025-38129" type="cve" title="CVE-2025-38129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38206" id="CVE-2025-38206" type="cve" title="CVE-2025-38206"/>
      <reference href="https://bugzilla.redhat.com/2376034" id="2376034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376377" id="2376377" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3066.html" id="ALSA-2026:3066" type="self" title="ALSA-2026:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.35.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">e2626b5620745be0455728651419e4ea1b3f4d9ef515f3226b5372a42800d2b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:30848</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 09:39:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
  * kernel: ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
  * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
  * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
  * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
  * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
  * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057)
  * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993)
  * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273)
  * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776)
  * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:30848" id="RHSA-2026:30848" type="rhsa" title="RHSA-2026:30848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31488" id="CVE-2026-31488" type="cve" title="CVE-2026-31488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43038" id="CVE-2026-43038" type="cve" title="CVE-2026-43038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43329" id="CVE-2026-43329" type="cve" title="CVE-2026-43329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45898" id="CVE-2026-45898" type="cve" title="CVE-2026-45898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46054" id="CVE-2026-46054" type="cve" title="CVE-2026-46054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46090" id="CVE-2026-46090" type="cve" title="CVE-2026-46090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46176" id="CVE-2026-46176" type="cve" title="CVE-2026-46176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46189" id="CVE-2026-46189" type="cve" title="CVE-2026-46189"/>
      <reference href="https://bugzilla.redhat.com/2460619" id="2460619" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464397" id="2464397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468124" id="2468124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481980" id="2481980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482025" id="2482025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482031" id="2482031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482588" id="2482588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482594" id="2482594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-30848.html" id="ALSA-2026:30848" type="self" title="ALSA-2026:30848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.19.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">d52b3922c7cdc2dbfd575d9177dd8acc69dedb58570300c3697fcb5b82dcfbc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33226</id>
    <title>Moderate: glibc security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 13:40:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security, bug fix, and enhancement update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450)


Bug Fix(es) and Enhancement(s):  

  * glibc: counter overflow in __wcsmbs_clone_conv if setlocale is called (JIRA:AlmaLinux-145156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33226" id="RHSA-2026:33226" type="rhsa" title="RHSA-2026:33226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5450" id="CVE-2026-5450" type="cve" title="CVE-2026-5450"/>
      <reference href="https://bugzilla.redhat.com/2459853" id="2459853" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33226.html" id="ALSA-2026:33226" type="self" title="ALSA-2026:33226"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libnsl" version="2.34" release="272.el9_8" epoch="0" arch="i686" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>libnsl-2.34-272.el9_8.i686.rpm</filename>
          <sum type="sha256">4470cab79f156891864e23272d868d42243d61c91ccd2d11b1eef14f214a1600</sum>
        </package>
        <package name="glibc-gconv-extra" version="2.34" release="272.el9_8" epoch="0" arch="i686" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>glibc-gconv-extra-2.34-272.el9_8.i686.rpm</filename>
          <sum type="sha256">a55dea4830fc648b9406c80a28ace4e300896e737096a488d2bf54a293f05c49</sum>
        </package>
        <package name="glibc" version="2.34" release="272.el9_8" epoch="0" arch="i686" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>glibc-2.34-272.el9_8.i686.rpm</filename>
          <sum type="sha256">a9e7f44c9630f793ebb333e9ec140f70c7788e95423cfb62fb98ce59356621ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33285</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-07-01 10:27:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)
  * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886)
  * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540)
  * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33285" id="RHSA-2026:33285" type="rhsa" title="RHSA-2026:33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31411" id="CVE-2026-31411" type="cve" title="CVE-2026-31411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43198" id="CVE-2026-43198" type="cve" title="CVE-2026-43198"/>
      <reference href="https://bugzilla.redhat.com/2456521" id="2456521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467228" id="2467228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33285.html" id="ALSA-2026:33285" type="self" title="ALSA-2026:33285"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.20.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">31605fc43bb0ec1fe8af467fc13e789e3c69758e540d043822fc62225d950896</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3405</id>
    <title>Important: libpng security update</title>
    <issued date="2026-02-26 00:00:00"/>
    <updated date="2026-03-02 13:11:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801)
  * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695)
  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3405" id="RHSA-2026:3405" type="rhsa" title="RHSA-2026:3405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22695" id="CVE-2026-22695" type="cve" title="CVE-2026-22695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22801" id="CVE-2026-22801" type="cve" title="CVE-2026-22801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2428824" id="2428824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428825" id="2428825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3405.html" id="ALSA-2026:3405" type="self" title="ALSA-2026:3405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libpng" version="1.6.37" release="12.el9_7.2" epoch="2" arch="i686" src="libpng-1.6.37-12.el9_7.2.src.rpm">
          <filename>libpng-1.6.37-12.el9_7.2.i686.rpm</filename>
          <sum type="sha256">d79a53dd492239df6285e3118c5e3c57417e2738e06183d45cbd9be968fc408b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3488</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 10:30:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)
  * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085)
  * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3488" id="RHSA-2026:3488" type="rhsa" title="RHSA-2026:3488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40168" id="CVE-2025-40168" type="cve" title="CVE-2025-40168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71085" id="CVE-2025-71085" type="cve" title="CVE-2025-71085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23097" id="CVE-2026-23097" type="cve" title="CVE-2026-23097"/>
      <reference href="https://bugzilla.redhat.com/2414482" id="2414482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429026" id="2429026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436802" id="2436802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3488.html" id="ALSA-2026:3488" type="self" title="ALSA-2026:3488"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.36.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">fc03987d3254cde4badf54ae82a6e7b9c94120c3d0827d8a883124bcb648ad1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36018</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-08 14:10:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
  * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)
  * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
  * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
  * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)
  * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
  * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)


Bug Fix(es) and Enhancement(s):  

  * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36018" id="RHSA-2026:36018" type="rhsa" title="RHSA-2026:36018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10263" id="CVE-2025-10263" type="cve" title="CVE-2025-10263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43112" id="CVE-2026-43112" type="cve" title="CVE-2026-43112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43276" id="CVE-2026-43276" type="cve" title="CVE-2026-43276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46116" id="CVE-2026-46116" type="cve" title="CVE-2026-46116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46155" id="CVE-2026-46155" type="cve" title="CVE-2026-46155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46209" id="CVE-2026-46209" type="cve" title="CVE-2026-46209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46227" id="CVE-2026-46227" type="cve" title="CVE-2026-46227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46244" id="CVE-2026-46244" type="cve" title="CVE-2026-46244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46259" id="CVE-2026-46259" type="cve" title="CVE-2026-46259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46316" id="CVE-2026-46316" type="cve" title="CVE-2026-46316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46323" id="CVE-2026-46323" type="cve" title="CVE-2026-46323"/>
      <reference href="https://bugzilla.redhat.com/2467015" id="2467015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467113" id="2467113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479832" id="2479832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482523" id="2482523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482564" id="2482564" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482636" id="2482636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482660" id="2482660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484451" id="2484451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484477" id="2484477" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486958" id="2486958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486982" id="2486982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36018.html" id="ALSA-2026:36018" type="self" title="ALSA-2026:36018"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.22.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">effe00d30869f04c3e371817148512aa1b59fa9ef12d9542b6593c9583e8af5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36645</id>
    <title>Important: kernel update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:24:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating  
system.  

Security Fix(es):  

  * kernel: eventpoll: defer struct eventpoll free to RCU grace period


(CVE-2026-43074)  

  * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF


(CVE-2026-46242)  

  * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266)


Bug Fix(es) and Enhancement(s):  

  * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344)
  * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36645" id="RHSA-2026:36645" type="rhsa" title="RHSA-2026:36645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43074" id="CVE-2026-43074" type="cve" title="CVE-2026-43074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46242" id="CVE-2026-46242" type="cve" title="CVE-2026-46242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53266" id="CVE-2026-53266" type="cve" title="CVE-2026-53266"/>
      <reference href="https://bugzilla.redhat.com/2467019" id="2467019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483519" id="2483519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485368" id="2485368" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36645.html" id="ALSA-2026:36645" type="self" title="ALSA-2026:36645"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.23.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">238c421dbf5ee5a35dc24135030e3f299b0baebf875929cb81329f634ed9f9fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36777</id>
    <title>Important: unbound security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-31 12:37:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292)
  * unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622)
  * unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390)
  * unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36777" id="RHSA-2026:36777" type="rhsa" title="RHSA-2026:36777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40622" id="CVE-2026-40622" type="cve" title="CVE-2026-40622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41292" id="CVE-2026-41292" type="cve" title="CVE-2026-41292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42534" id="CVE-2026-42534" type="cve" title="CVE-2026-42534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44390" id="CVE-2026-44390" type="cve" title="CVE-2026-44390"/>
      <reference href="https://bugzilla.redhat.com/2480125" id="2480125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480130" id="2480130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480131" id="2480131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36777.html" id="ALSA-2026:36777" type="self" title="ALSA-2026:36777"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="unbound-libs" version="1.24.2" release="3.el9_8.2" epoch="0" arch="i686" src="unbound-1.24.2-3.el9_8.2.src.rpm">
          <filename>unbound-libs-1.24.2-3.el9_8.2.i686.rpm</filename>
          <sum type="sha256">48cc80caa9e995510ab8a454a7fb6f02a35851451114ead47eb0b0e79049ac75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36957</id>
    <title>Important: kernel security update</title>
    <issued date="2026-07-09 00:00:00"/>
    <updated date="2026-07-10 09:18:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
  * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
  * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36957" id="RHSA-2026:36957" type="rhsa" title="RHSA-2026:36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71066" id="CVE-2025-71066" type="cve" title="CVE-2025-71066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46113" id="CVE-2026-46113" type="cve" title="CVE-2026-46113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53359" id="CVE-2026-53359" type="cve" title="CVE-2026-53359"/>
      <reference href="https://bugzilla.redhat.com/2429036" id="2429036" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482587" id="2482587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497033" id="2497033" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36957.html" id="ALSA-2026:36957" type="self" title="ALSA-2026:36957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.24.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">b74ce763bd48475a47a9d2858146f8903411a028422939b8fe94b4ae5cf99f56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38491</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-13 20:53:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979)
  * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)
  * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)
  * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
  * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166)


Bug Fix(es) and Enhancement(s):  

  * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38491" id="RHSA-2026:38491" type="rhsa" title="RHSA-2026:38491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22979" id="CVE-2026-22979" type="cve" title="CVE-2026-22979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43499" id="CVE-2026-43499" type="cve" title="CVE-2026-43499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46086" id="CVE-2026-46086" type="cve" title="CVE-2026-46086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53016" id="CVE-2026-53016" type="cve" title="CVE-2026-53016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53166" id="CVE-2026-53166" type="cve" title="CVE-2026-53166"/>
      <reference href="https://bugzilla.redhat.com/2432402" id="2432402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480453" id="2480453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481989" id="2481989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492269" id="2492269" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492805" id="2492805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38491.html" id="ALSA-2026:38491" type="self" title="ALSA-2026:38491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.25.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">a8127da393233bcaf023d83cd084d2fc98bf4d88030ef915c031a316b1d5d781</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38511</id>
    <title>Important: vim security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-08-13 08:32:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: command injection when decompressing .tgz archives (CVE-2026-46483)
  * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)
  * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)
  * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38511" id="RHSA-2026:38511" type="rhsa" title="RHSA-2026:38511"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46483" id="CVE-2026-46483" type="cve" title="CVE-2026-46483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47162" id="CVE-2026-47162" type="cve" title="CVE-2026-47162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47167" id="CVE-2026-47167" type="cve" title="CVE-2026-47167"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52858" id="CVE-2026-52858" type="cve" title="CVE-2026-52858"/>
      <reference href="https://bugzilla.redhat.com/2477915" id="2477915" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487964" id="2487964" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38511.html" id="ALSA-2026:38511" type="self" title="ALSA-2026:38511"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="26.el9_8.10" epoch="2" arch="noarch" src="vim-8.2.2637-26.el9_8.10.src.rpm">
          <filename>vim-filesystem-8.2.2637-26.el9_8.10.noarch.rpm</filename>
          <sum type="sha256">916817f918ac9f2a580b5eefa4db0d7da59817a9c7e07e5100b20d526e93d0dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39315</id>
    <title>Moderate: libsolv security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-15 08:43:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsolv security update</summary>
    <description>The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.  

Security Fix(es):  

  * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39315" id="RHSA-2026:39315" type="rhsa" title="RHSA-2026:39315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48864" id="CVE-2026-48864" type="cve" title="CVE-2026-48864"/>
      <reference href="https://bugzilla.redhat.com/2460425" id="2460425" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39315.html" id="ALSA-2026:39315" type="self" title="ALSA-2026:39315"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libsolv" version="0.7.24" release="6.el9_8" epoch="0" arch="i686" src="libsolv-0.7.24-6.el9_8.src.rpm">
          <filename>libsolv-0.7.24-6.el9_8.i686.rpm</filename>
          <sum type="sha256">0c15ee1f12d0c2338fa697397eca369b71026ee055c98308577165cefae22bad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39316</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-15 08:39:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (CVE-2026-34980)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39316" id="RHSA-2026:39316" type="rhsa" title="RHSA-2026:39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34980" id="CVE-2026-34980" type="cve" title="CVE-2026-34980"/>
      <reference href="https://bugzilla.redhat.com/2454954" id="2454954" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39316.html" id="ALSA-2026:39316" type="self" title="ALSA-2026:39316"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="cups-libs" version="2.3.3op2" release="39.el9_8" epoch="1" arch="i686" src="cups-2.3.3op2-39.el9_8.src.rpm">
          <filename>cups-libs-2.3.3op2-39.el9_8.i686.rpm</filename>
          <sum type="sha256">9f7d0b3d68c15e23e3abd82312ccc132b232f7a3b37e3ae879a85a8b370a3f9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39317</id>
    <title>Low: libxml2 security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-15 08:38:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39317" id="RHSA-2026:39317" type="rhsa" title="RHSA-2026:39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6170" id="CVE-2025-6170" type="cve" title="CVE-2025-6170"/>
      <reference href="https://bugzilla.redhat.com/2372952" id="2372952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39317.html" id="ALSA-2026:39317" type="self" title="ALSA-2026:39317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libxml2" version="2.9.13" release="14.el9_8.2" epoch="0" arch="i686" src="libxml2-2.9.13-14.el9_8.2.src.rpm">
          <filename>libxml2-2.9.13-14.el9_8.2.i686.rpm</filename>
          <sum type="sha256">eb211876c4ce5d7abc161a50418c9b7224c181b339a7746ef49ec154e276ea38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3940</id>
    <title>Moderate: nfs-utils security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-13 09:30:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nfs-utils security update</summary>
    <description>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.   

Security Fix(es):  

  * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3940" id="RHSA-2026:3940" type="rhsa" title="RHSA-2026:3940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12801" id="CVE-2025-12801" type="cve" title="CVE-2025-12801"/>
      <reference href="https://bugzilla.redhat.com/2413081" id="2413081" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3940.html" id="ALSA-2026:3940" type="self" title="ALSA-2026:3940"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libnfsidmap" version="2.5.4" release="38.el9_7.3" epoch="1" arch="i686" src="nfs-utils-2.5.4-38.el9_7.3.src.rpm">
          <filename>libnfsidmap-2.5.4-38.el9_7.3.i686.rpm</filename>
          <sum type="sha256">244b0050e6d46668bcbfc4445a6cb577e08009f2d81d98f1aa6ebab951994e70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3966</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 10:09:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106)
  * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3966" id="RHSA-2026:3966" type="rhsa" title="RHSA-2026:3966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38106" id="CVE-2025-38106" type="cve" title="CVE-2025-38106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23001" id="CVE-2026-23001" type="cve" title="CVE-2026-23001"/>
      <reference href="https://bugzilla.redhat.com/2376077" id="2376077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432664" id="2432664" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3966.html" id="ALSA-2026:3966" type="self" title="ALSA-2026:3966"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.38.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">05d8c9e377882086a6973dc7ed9f7f74113af72d63ea8459ce56fc4c057ff6ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39798</id>
    <title>Important: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-15 12:41:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)


Bug Fix(es) and Enhancement(s):  

  * python3.9 test_ssl fails ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192) [almalinux-9.8.z] (JIRA:AlmaLinux-194207)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39798" id="RHSA-2026:39798" type="rhsa" title="RHSA-2026:39798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15308" id="CVE-2026-15308" type="cve" title="CVE-2026-15308"/>
      <reference href="https://bugzilla.redhat.com/2498608" id="2498608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39798.html" id="ALSA-2026:39798" type="self" title="ALSA-2026:39798"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3-libs" version="3.9.25" release="7.el9_8.2" epoch="0" arch="i686" src="python3.9-3.9.25-7.el9_8.2.src.rpm">
          <filename>python3-libs-3.9.25-7.el9_8.2.i686.rpm</filename>
          <sum type="sha256">094a4acec51cb0ff482443af8832786c079d9bb073dfbd6e63755a2ad5d955bd</sum>
        </package>
        <package name="python3" version="3.9.25" release="7.el9_8.2" epoch="0" arch="i686" src="python3.9-3.9.25-7.el9_8.2.src.rpm">
          <filename>python3-3.9.25-7.el9_8.2.i686.rpm</filename>
          <sum type="sha256">569a09e652c0b25f50af6bfa35868b663f124acd21edd3e5989e15b0a8e5dd46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4168</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:25:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4168" id="RHSA-2026:4168" type="rhsa" title="RHSA-2026:4168"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4168.html" id="ALSA-2026:4168" type="self" title="ALSA-2026:4168"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-15366.html" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-15367.html" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-0865.html" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-1299.html" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-libs" version="3.9.25" release="3.el9_7.1" epoch="0" arch="i686" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python3-libs-3.9.25-3.el9_7.1.i686.rpm</filename>
          <sum type="sha256">ed0044ef2a83ffc6235deac9a9f0a021efa8dd1eff06cef08e83c4aa5612de56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4188</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:21:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820)
  * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4188" id="RHSA-2026:4188" type="rhsa" title="RHSA-2026:4188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14831" id="CVE-2025-14831" type="cve" title="CVE-2025-14831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9820" id="CVE-2025-9820" type="cve" title="CVE-2025-9820"/>
      <reference href="https://bugzilla.redhat.com/2392528" id="2392528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423177" id="2423177" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4188.html" id="ALSA-2026:4188" type="self" title="ALSA-2026:4188"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="gnutls" version="3.8.3" release="10.el9_7" epoch="0" arch="i686" src="gnutls-3.8.3-10.el9_7.src.rpm">
          <filename>gnutls-3.8.3-10.el9_7.i686.rpm</filename>
          <sum type="sha256">2753534be5c8510ec8a87328d8996bcab1f6a410d693837f801c2f30b42fc7f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42089</id>
    <title>Important: glib2 security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-21 10:22:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42089" id="RHSA-2026:42089" type="rhsa" title="RHSA-2026:42089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58016" id="CVE-2026-58016" type="cve" title="CVE-2026-58016"/>
      <reference href="https://bugzilla.redhat.com/2492257" id="2492257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42089.html" id="ALSA-2026:42089" type="self" title="ALSA-2026:42089"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="glib2" version="2.68.4" release="19.el9_8.2" epoch="0" arch="i686" src="glib2-2.68.4-19.el9_8.2.src.rpm">
          <filename>glib2-2.68.4-19.el9_8.2.i686.rpm</filename>
          <sum type="sha256">c5ec262c2636c22adaf1a0d77be48afebcf34ef980b7b94d4f2763c1027e4918</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42122</id>
    <title>Important: sssd security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-24 08:14:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)
  * sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42122" id="RHSA-2026:42122" type="rhsa" title="RHSA-2026:42122"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-14474" id="CVE-2026-14474" type="cve" title="CVE-2026-14474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-14476" id="CVE-2026-14476" type="cve" title="CVE-2026-14476"/>
      <reference href="https://bugzilla.redhat.com/2496556" id="2496556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2496581" id="2496581" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42122.html" id="ALSA-2026:42122" type="self" title="ALSA-2026:42122"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3-sssdconfig" version="2.9.8" release="4.el9_8.1" epoch="0" arch="noarch" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>python3-sssdconfig-2.9.8-4.el9_8.1.noarch.rpm</filename>
          <sum type="sha256">28b26073151db0e1c5e86bf07621e25e15336fbce03424532426a208a66f1da2</sum>
        </package>
        <package name="libsss_nss_idmap" version="2.9.8" release="4.el9_8.1" epoch="0" arch="i686" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>libsss_nss_idmap-2.9.8-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">4cf36ce09a02ee8f764e38cef2e8fb92e1d5af0314146d5e36d660c2abc86d57</sum>
        </package>
        <package name="libsss_certmap" version="2.9.8" release="4.el9_8.1" epoch="0" arch="i686" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>libsss_certmap-2.9.8-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">7782c2dcca1448a19f0e5362dc1a3def9daf1a9f69feb5e7e14fdeeb8af3c22d</sum>
        </package>
        <package name="libsss_idmap" version="2.9.8" release="4.el9_8.1" epoch="0" arch="i686" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>libsss_idmap-2.9.8-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">81ad74422ef05dad7aa758f55e2ff35a6eff5cd8aad895837824dc11bd8ab5b8</sum>
        </package>
        <package name="sssd-client" version="2.9.8" release="4.el9_8.1" epoch="0" arch="i686" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>sssd-client-2.9.8-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">8da589d79751a88488954907723ee2a303071e1c5e32437632701900055ab2ee</sum>
        </package>
        <package name="libipa_hbac" version="2.9.8" release="4.el9_8.1" epoch="0" arch="i686" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>libipa_hbac-2.9.8-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">b8dfde5d9520b66f82aad08f7209b444da29909e76cb1349479396e7edca5686</sum>
        </package>
        <package name="libsss_simpleifp" version="2.9.8" release="4.el9_8.1" epoch="0" arch="i686" src="sssd-2.9.8-4.el9_8.1.src.rpm">
          <filename>libsss_simpleifp-2.9.8-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">c99663d1221d80be8026d6db756a910ab1d6c2d90c3d98aa738c6fd6f3fafedb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42736</id>
    <title>Important: acl security update</title>
    <issued date="2026-07-21 00:00:00"/>
    <updated date="2026-07-22 10:18:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>acl security update</summary>
    <description>Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists.  

Security Fix(es):  

  * acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369)
  * acl: TOCTOU Symlink Traversal via getfacl/setfacl (CVE-2026-54370)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42736" id="RHSA-2026:42736" type="rhsa" title="RHSA-2026:42736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-54369" id="CVE-2026-54369" type="cve" title="CVE-2026-54369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-54370" id="CVE-2026-54370" type="cve" title="CVE-2026-54370"/>
      <reference href="https://bugzilla.redhat.com/2490277" id="2490277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490279" id="2490279" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42736.html" id="ALSA-2026:42736" type="self" title="ALSA-2026:42736"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libacl" version="2.4.0" release="1.el9_8" epoch="0" arch="i686" src="acl-2.4.0-1.el9_8.src.rpm">
          <filename>libacl-2.4.0-1.el9_8.i686.rpm</filename>
          <sum type="sha256">8a1285057f65f164204102ce65365cfc315c29728c2e34a039309897f012d0e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42952</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-07-21 00:00:00"/>
    <updated date="2026-07-23 08:02:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
  * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
  * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42952" id="RHSA-2026:42952" type="rhsa" title="RHSA-2026:42952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5435" id="CVE-2026-5435" type="cve" title="CVE-2026-5435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5928" id="CVE-2026-5928" type="cve" title="CVE-2026-5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6238" id="CVE-2026-6238" type="cve" title="CVE-2026-6238"/>
      <reference href="https://bugzilla.redhat.com/2459854" id="2459854" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463465" id="2463465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463539" id="2463539" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42952.html" id="ALSA-2026:42952" type="self" title="ALSA-2026:42952"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libnsl" version="2.34" release="274.el9_8" epoch="0" arch="i686" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>libnsl-2.34-274.el9_8.i686.rpm</filename>
          <sum type="sha256">02ad476ece00d9fbfbb27ef5d5b488810bf5dc92b70e1bbc24acc13e17ab5576</sum>
        </package>
        <package name="glibc-gconv-extra" version="2.34" release="274.el9_8" epoch="0" arch="i686" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>glibc-gconv-extra-2.34-274.el9_8.i686.rpm</filename>
          <sum type="sha256">827494f0b783fd31c6e16af45fdd14a47f0a3cae612489cce002ee83a0b864be</sum>
        </package>
        <package name="glibc" version="2.34" release="274.el9_8" epoch="0" arch="i686" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>glibc-2.34-274.el9_8.i686.rpm</filename>
          <sum type="sha256">83899edbce7328a3baad9d1e4e95bdb8ebf69f73327789b44d3779e62722167c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:43307</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 10:31:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)
  * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
  * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
  * kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
  * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)
  * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980)
  * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121)
  * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:43307" id="RHSA-2026:43307" type="rhsa" title="RHSA-2026:43307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71113" id="CVE-2025-71113" type="cve" title="CVE-2025-71113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23110" id="CVE-2026-23110" type="cve" title="CVE-2026-23110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46150" id="CVE-2026-46150" type="cve" title="CVE-2026-46150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46215" id="CVE-2026-46215" type="cve" title="CVE-2026-46215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53071" id="CVE-2026-53071" type="cve" title="CVE-2026-53071"/>
      <reference href="https://bugzilla.redhat.com/2429611" id="2429611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436755" id="2436755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481972" id="2481972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482612" id="2482612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482615" id="2482615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492458" id="2492458" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-43307.html" id="ALSA-2026:43307" type="self" title="ALSA-2026:43307"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.29.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">56e625caf91c0ee587ef39ae39b9b7c5f2306573ba21bf90507ea1985fcdd49d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:45192</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-24 00:00:00"/>
    <updated date="2026-08-07 12:59:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
  * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
  * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
  * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
  * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)


Bug Fix(es) and Enhancement(s):  

  * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412)
  * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:45192" id="RHSA-2026:45192" type="rhsa" title="RHSA-2026:45192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40026" id="CVE-2025-40026" type="cve" title="CVE-2025-40026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52950" id="CVE-2026-52950" type="cve" title="CVE-2026-52950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52976" id="CVE-2026-52976" type="cve" title="CVE-2026-52976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53006" id="CVE-2026-53006" type="cve" title="CVE-2026-53006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53059" id="CVE-2026-53059" type="cve" title="CVE-2026-53059"/>
      <reference href="https://bugzilla.redhat.com/2406712" id="2406712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492277" id="2492277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492284" id="2492284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492318" id="2492318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492363" id="2492363" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-45192.html" id="ALSA-2026:45192" type="self" title="ALSA-2026:45192"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-64561.html" id="CVE-2026-64561" type="cve" title="CVE-2026-64561"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.30.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.30.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.30.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">690b3817eda0deafd547bf0332dae3a83fc06c4c1900e37e5f78a02e2c6e5ed3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47040</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-28 00:00:00"/>
    <updated date="2026-08-01 15:34:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
  * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
  * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
  * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
  * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)


Bug Fix(es) and Enhancement(s):  

  * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257)
  * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47040" id="RHSA-2026:47040" type="rhsa" title="RHSA-2026:47040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39797" id="CVE-2025-39797" type="cve" title="CVE-2025-39797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23002" id="CVE-2026-23002" type="cve" title="CVE-2026-23002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52973" id="CVE-2026-52973" type="cve" title="CVE-2026-52973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53281" id="CVE-2026-53281" type="cve" title="CVE-2026-53281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64017" id="CVE-2026-64017" type="cve" title="CVE-2026-64017"/>
      <reference href="https://bugzilla.redhat.com/2400057" id="2400057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432666" id="2432666" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492413" id="2492413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493728" id="2493728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502449" id="2502449" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-47040.html" id="ALSA-2026:47040" type="self" title="ALSA-2026:47040"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.31.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.31.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.31.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">e67981a9974c32791a171949c25e5ec756eb1a6a5f99946ea843951567dba6af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4759</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-20 07:31:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818)
  * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4759" id="RHSA-2026:4759" type="rhsa" title="RHSA-2026:4759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39818" id="CVE-2025-39818" type="cve" title="CVE-2025-39818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68800" id="CVE-2025-68800" type="cve" title="CVE-2025-68800"/>
      <reference href="https://bugzilla.redhat.com/2395797" id="2395797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429065" id="2429065" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4759.html" id="ALSA-2026:4759" type="self" title="ALSA-2026:4759"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.41.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">37e98c49472b9e1d34ae368727ba027212274c4bd986b63f6555a915ba64bcc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4760</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 14:40:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4760" id="RHSA-2026:4760" type="rhsa" title="RHSA-2026:4760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61662" id="CVE-2025-61662" type="cve" title="CVE-2025-61662"/>
      <reference href="https://bugzilla.redhat.com/2414683" id="2414683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4760.html" id="ALSA-2026:4760" type="self" title="ALSA-2026:4760"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="grub2-pc-modules" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">07f3c4d11cfb3c9c18de75619310901be03ba88b91860f6af22eee5435cd9eb2</sum>
        </package>
        <package name="grub2-efi-x64-modules" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-efi-x64-modules-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">095a388a5ddc5bd4cf2750f29ee309dca75040c15cecc33c941e1dc070c1531a</sum>
        </package>
        <package name="grub2-common" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-common-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">5787f986552c5cf8080b4712a8853e3c6fade305847d56c463ff18e640988b48</sum>
        </package>
        <package name="grub2-efi-aa64-modules" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-efi-aa64-modules-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">725215de90d8f0da4350416562fbde92758da167fb9e88dc51c568dbc6ea42a9</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">f13ce2aa16994df090d24fe542a11bf1c5539259be2a796e549043bab49b5613</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47982</id>
    <title>Important: vim security update</title>
    <issued date="2026-07-29 00:00:00"/>
    <updated date="2026-07-31 12:25:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)
  * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)
  * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)
  * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)
  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47982" id="RHSA-2026:47982" type="rhsa" title="RHSA-2026:47982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55693" id="CVE-2026-55693" type="cve" title="CVE-2026-55693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57455" id="CVE-2026-57455" type="cve" title="CVE-2026-57455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57456" id="CVE-2026-57456" type="cve" title="CVE-2026-57456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59856" id="CVE-2026-59856" type="cve" title="CVE-2026-59856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59858" id="CVE-2026-59858" type="cve" title="CVE-2026-59858"/>
      <reference href="https://bugzilla.redhat.com/2492968" id="2492968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492972" id="2492972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492980" id="2492980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2498867" id="2498867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2498868" id="2498868" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-47982.html" id="ALSA-2026:47982" type="self" title="ALSA-2026:47982"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="26.el9_8.13" epoch="2" arch="noarch" src="vim-8.2.2637-26.el9_8.13.src.rpm">
          <filename>vim-filesystem-8.2.2637-26.el9_8.13.noarch.rpm</filename>
          <sum type="sha256">1dce4bf19fab1f7744521428e9e7318704d0264b3f6f15609608cbc8630aff78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:49212</id>
    <title>Important: kernel security update</title>
    <issued date="2026-07-31 00:00:00"/>
    <updated date="2026-08-06 13:53:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)
  * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
  * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle ()
  * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:49212" id="RHSA-2026:49212" type="rhsa" title="RHSA-2026:49212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52923" id="CVE-2026-52923" type="cve" title="CVE-2026-52923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52993" id="CVE-2026-52993" type="cve" title="CVE-2026-52993"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64530" id="CVE-2026-64530" type="cve" title="CVE-2026-64530"/>
      <reference href="https://bugzilla.redhat.com/2492094" id="2492094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492437" id="2492437" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504052" id="2504052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507345" id="2507345" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-49212.html" id="ALSA-2026:49212" type="self" title="ALSA-2026:49212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.33.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.33.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.33.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">e4fbd5c2b2f15de80eb703be6f33f54838b5895f178d97c0856e2d4819d78939</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:49667</id>
    <title>Moderate: p11-kit security update</title>
    <issued date="2026-08-03 00:00:00"/>
    <updated date="2026-08-06 13:21:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>p11-kit security update</summary>
    <description>The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.  

Security Fix(es):  

  * p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:49667" id="RHSA-2026:49667" type="rhsa" title="RHSA-2026:49667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13757" id="CVE-2026-13757" type="cve" title="CVE-2026-13757"/>
      <reference href="https://bugzilla.redhat.com/2494556" id="2494556" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-49667.html" id="ALSA-2026:49667" type="self" title="ALSA-2026:49667"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="p11-kit" version="0.26.4" release="1.el9_8" epoch="0" arch="i686" src="p11-kit-0.26.4-1.el9_8.src.rpm">
          <filename>p11-kit-0.26.4-1.el9_8.i686.rpm</filename>
          <sum type="sha256">bda14fe3f0c812ce5829f24c58050a3bd60e47daca49c4222a14c6576577b605</sum>
        </package>
        <package name="p11-kit-trust" version="0.26.4" release="1.el9_8" epoch="0" arch="i686" src="p11-kit-0.26.4-1.el9_8.src.rpm">
          <filename>p11-kit-trust-0.26.4-1.el9_8.i686.rpm</filename>
          <sum type="sha256">ff0f36a806ca5b14208177eb0487d5b0a87bd168b805aa2007a8ced46ce4c3e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:49870</id>
    <title>Low: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-06 13:53:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214)


Bug Fix(es) and Enhancement(s):  

  * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273)
  * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430)
  * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021)
  * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:49870" id="RHSA-2026:49870" type="rhsa" title="RHSA-2026:49870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68214" id="CVE-2025-68214" type="cve" title="CVE-2025-68214"/>
      <reference href="https://bugzilla.redhat.com/2422686" id="2422686" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-49870.html" id="ALSA-2026:49870" type="self" title="ALSA-2026:49870"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.34.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.34.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.34.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">c2a3a31c8253584a56dc19e02bd59754312a0e42a4a8c1b82f9138ffb7da1a48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:50141</id>
    <title>Important: sg3_utils security, bug fix, and enhancement update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-06 13:21:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sg3_utils security, bug fix, and enhancement update</summary>
    <description>The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.  

Security Fix(es):  

  * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)


Bug Fix(es) and Enhancement(s):  

  * sg_inq output conformance for SCSI name string and ATA fields [almalinux-9.8.z] (JIRA:AlmaLinux-188130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:50141" id="RHSA-2026:50141" type="rhsa" title="RHSA-2026:50141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-16313" id="CVE-2026-16313" type="cve" title="CVE-2026-16313"/>
      <reference href="https://bugzilla.redhat.com/2502845" id="2502845" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-50141.html" id="ALSA-2026:50141" type="self" title="ALSA-2026:50141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="sg3_utils-libs" version="1.47" release="10.el9_8.1" epoch="0" arch="i686" src="sg3_utils-1.47-10.el9_8.1.src.rpm">
          <filename>sg3_utils-libs-1.47-10.el9_8.1.i686.rpm</filename>
          <sum type="sha256">122db83b2f7ce6e709634403e243bee26712187998c5be135d809004b43f1d03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:50147</id>
    <title>Moderate: libgcrypt security update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-07 15:25:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libgcrypt security update</summary>
    <description>The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.  

Security Fix(es):  

  * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:50147" id="RHSA-2026:50147" type="rhsa" title="RHSA-2026:50147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41989" id="CVE-2026-41989" type="cve" title="CVE-2026-41989"/>
      <reference href="https://bugzilla.redhat.com/2461063" id="2461063" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-50147.html" id="ALSA-2026:50147" type="self" title="ALSA-2026:50147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libgcrypt" version="1.10.0" release="13.el9_8" epoch="0" arch="i686" src="libgcrypt-1.10.0-13.el9_8.src.rpm">
          <filename>libgcrypt-1.10.0-13.el9_8.i686.rpm</filename>
          <sum type="sha256">fd892f6b6e54339a7410e80672bd3829814a94e996f8372883cfacf6fb8710bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5080</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-03-19 00:00:00"/>
    <updated date="2026-03-20 07:21:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive (CVE-2026-4111)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5080" id="RHSA-2026:5080" type="rhsa" title="RHSA-2026:5080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4111" id="CVE-2026-4111" type="cve" title="CVE-2026-4111"/>
      <reference href="https://bugzilla.redhat.com/2446453" id="2446453" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5080.html" id="ALSA-2026:5080" type="self" title="ALSA-2026:5080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libarchive" version="3.5.3" release="7.el9_7" epoch="0" arch="i686" src="libarchive-3.5.3-7.el9_7.src.rpm">
          <filename>libarchive-3.5.3-7.el9_7.i686.rpm</filename>
          <sum type="sha256">c4edd81e298f9715d85566ad1a5a5ebaf0a801e8a96fd8210ce9161e71922a8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:51035</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-06 00:00:00"/>
    <updated date="2026-08-07 15:25:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415)
  * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)


Bug Fix(es) and Enhancement(s):  

  * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331)
  * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058)
  * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:51035" id="RHSA-2026:51035" type="rhsa" title="RHSA-2026:51035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23415" id="CVE-2026-23415" type="cve" title="CVE-2026-23415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43450" id="CVE-2026-43450" type="cve" title="CVE-2026-43450"/>
      <reference href="https://bugzilla.redhat.com/2454320" id="2454320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468228" id="2468228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-51035.html" id="ALSA-2026:51035" type="self" title="ALSA-2026:51035"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.36.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.36.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.36.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">1067ec41a63f8c70589fd60a565b3c47c3aca1b631c7496e05bca04fd3473230</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:52674</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2026-08-10 00:00:00"/>
    <updated date="2026-08-10 10:21:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() (CVE-2026-14164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:52674" id="RHSA-2026:52674" type="rhsa" title="RHSA-2026:52674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-14164" id="CVE-2026-14164" type="cve" title="CVE-2026-14164"/>
      <reference href="https://bugzilla.redhat.com/2493411" id="2493411" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-52674.html" id="ALSA-2026:52674" type="self" title="ALSA-2026:52674"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libarchive" version="3.5.3" release="11.el9_8" epoch="0" arch="i686" src="libarchive-3.5.3-11.el9_8.src.rpm">
          <filename>libarchive-3.5.3-11.el9_8.i686.rpm</filename>
          <sum type="sha256">6a56ba22d6d4856bf165aea6f05849e493efe7e912df2f1c55169d9727dfaf33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:53329</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-11 00:00:00"/>
    <updated date="2026-08-13 08:32:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530)
  * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)
  * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368)
  * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531)


Bug Fix(es) and Enhancement(s):  

  * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036)
  * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578)
  * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580)
  * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:53329" id="RHSA-2026:53329" type="rhsa" title="RHSA-2026:53329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54518" id="CVE-2025-54518" type="cve" title="CVE-2025-54518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31530" id="CVE-2026-31530" type="cve" title="CVE-2026-31530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64368" id="CVE-2026-64368" type="cve" title="CVE-2026-64368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64531" id="CVE-2026-64531" type="cve" title="CVE-2026-64531"/>
      <reference href="https://bugzilla.redhat.com/2460644" id="2460644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477784" id="2477784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507213" id="2507213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507402" id="2507402" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-53329.html" id="ALSA-2026:53329" type="self" title="ALSA-2026:53329"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.38.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.38.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.38.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">c885d6bbfa62fdac0cf46efb6001990209378b3dbdbbf3e658d39163f3f59378</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:53844</id>
    <title>Important: iscsi-initiator-utils security, bug fix, and enhancement update</title>
    <issued date="2026-08-11 00:00:00"/>
    <updated date="2026-08-12 09:24:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>iscsi-initiator-utils security, bug fix, and enhancement update</summary>
    <description>The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.  

Security Fix(es):  

  * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)
  * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)


Bug Fix(es) and Enhancement(s):  

  * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:53844" id="RHSA-2026:53844" type="rhsa" title="RHSA-2026:53844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44943" id="CVE-2026-44943" type="cve" title="CVE-2026-44943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44944" id="CVE-2026-44944" type="cve" title="CVE-2026-44944"/>
      <reference href="https://bugzilla.redhat.com/2508412" id="2508412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2508419" id="2508419" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-53844.html" id="ALSA-2026:53844" type="self" title="ALSA-2026:53844"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="iscsi-initiator-utils" version="6.2.1.11" release="1.git4b3e853.el9_8.2" epoch="0" arch="i686" src="iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2.src.rpm">
          <filename>iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2.i686.rpm</filename>
          <sum type="sha256">79feae4773103883af45d5940511d433e82f2e064a4ce4f31bc16a3fabe1121e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:53847</id>
    <title>Important: isns-utils security update</title>
    <issued date="2026-08-11 00:00:00"/>
    <updated date="2026-08-12 09:23:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>isns-utils security update</summary>
    <description>The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.  

Security Fix(es):  

  * open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:53847" id="RHSA-2026:53847" type="rhsa" title="RHSA-2026:53847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55995" id="CVE-2026-55995" type="cve" title="CVE-2026-55995"/>
      <reference href="https://bugzilla.redhat.com/2508414" id="2508414" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-53847.html" id="ALSA-2026:53847" type="self" title="ALSA-2026:53847"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="isns-utils-libs" version="0.101" release="4.el9_8.1" epoch="0" arch="i686" src="isns-utils-0.101-4.el9_8.1.src.rpm">
          <filename>isns-utils-libs-0.101-4.el9_8.1.i686.rpm</filename>
          <sum type="sha256">d169c24f00d4199e22a21b217efe00116ba22bad73e2d6b4afed62f663fbc6af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54268</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-08-12 00:00:00"/>
    <updated date="2026-08-13 09:21:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54268" id="RHSA-2026:54268" type="rhsa" title="RHSA-2026:54268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11940" id="CVE-2026-11940" type="cve" title="CVE-2026-11940"/>
      <reference href="https://bugzilla.redhat.com/2491848" id="2491848" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54268.html" id="ALSA-2026:54268" type="self" title="ALSA-2026:54268"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3-libs" version="3.9.25" release="7.el9_8.3" epoch="0" arch="i686" src="python3.9-3.9.25-7.el9_8.3.src.rpm">
          <filename>python3-libs-3.9.25-7.el9_8.3.i686.rpm</filename>
          <sum type="sha256">40bfe60e5ba02118a483fbe7f000bd7b00e7847427075fceca461318237a07f5</sum>
        </package>
        <package name="python3" version="3.9.25" release="7.el9_8.3" epoch="0" arch="i686" src="python3.9-3.9.25-7.el9_8.3.src.rpm">
          <filename>python3-3.9.25-7.el9_8.3.i686.rpm</filename>
          <sum type="sha256">ff9a8bfc84264d9d6294adc83e0f21f4cb4f7fd722998b4a43908e6ef8c0f5ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54443</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-12 00:00:00"/>
    <updated date="2026-08-18 12:11:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202)
  * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434)
  * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54443" id="RHSA-2026:54443" type="rhsa" title="RHSA-2026:54443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53202" id="CVE-2026-53202" type="cve" title="CVE-2026-53202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53264" id="CVE-2026-53264" type="cve" title="CVE-2026-53264"/>
      <reference href="https://bugzilla.redhat.com/2492823" id="2492823" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492851" id="2492851" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54443.html" id="ALSA-2026:54443" type="self" title="ALSA-2026:54443"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.39.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.39.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.39.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">4e81848e8122745226ed38a29ccd7766946a6ae878793ba29a4625c23f6b8c14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54484</id>
    <title>Moderate: python-idna security update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-13 09:16:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-idna security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-idna: idna: Denial of Service via specially crafted long inputs (CVE-2026-45409)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54484" id="RHSA-2026:54484" type="rhsa" title="RHSA-2026:54484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45409" id="CVE-2026-45409" type="cve" title="CVE-2026-45409"/>
      <reference href="https://bugzilla.redhat.com/2485616" id="2485616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54484.html" id="ALSA-2026:54484" type="self" title="ALSA-2026:54484"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="python3-idna" version="2.10" release="8.el9_8" epoch="0" arch="noarch" src="python-idna-2.10-8.el9_8.src.rpm">
          <filename>python3-idna-2.10-8.el9_8.noarch.rpm</filename>
          <sum type="sha256">8677ccc80e47b4dd91906c657b970657e19735b90d9762f8d4340e4a52deb317</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54662</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-14 08:48:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54662" id="RHSA-2026:54662" type="rhsa" title="RHSA-2026:54662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58055" id="CVE-2026-58055" type="cve" title="CVE-2026-58055"/>
      <reference href="https://bugzilla.redhat.com/2493954" id="2493954" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54662.html" id="ALSA-2026:54662" type="self" title="ALSA-2026:54662"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libnghttp2" version="1.43.0" release="6.el9_8.2" epoch="0" arch="i686" src="nghttp2-1.43.0-6.el9_8.2.src.rpm">
          <filename>libnghttp2-1.43.0-6.el9_8.2.i686.rpm</filename>
          <sum type="sha256">4d4233b4da8c4a6a8ef4baf42c0802509dc750a5af7ff376f7b440da86e2bb3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55439</id>
    <title>Important: curl security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:52:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.  

Security Fix(es):  

  * curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965)
  * curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783)
  * curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547)
  * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55439" id="RHSA-2026:55439" type="rhsa" title="RHSA-2026:55439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1965" id="CVE-2026-1965" type="cve" title="CVE-2026-1965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3783" id="CVE-2026-3783" type="cve" title="CVE-2026-3783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8286" id="CVE-2026-8286" type="cve" title="CVE-2026-8286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9547" id="CVE-2026-9547" type="cve" title="CVE-2026-9547"/>
      <reference href="https://bugzilla.redhat.com/2446448" id="2446448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446450" id="2446450" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2496758" id="2496758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2496763" id="2496763" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55439.html" id="ALSA-2026:55439" type="self" title="ALSA-2026:55439"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libcurl-minimal" version="7.76.1" release="40.el9_8.5" epoch="0" arch="i686" src="curl-7.76.1-40.el9_8.5.src.rpm">
          <filename>libcurl-minimal-7.76.1-40.el9_8.5.i686.rpm</filename>
          <sum type="sha256">5a3f2114c450a30afad72d188b44e967e8f8e226b7cf0324e0a40759045f92ee</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="40.el9_8.5" epoch="0" arch="i686" src="curl-7.76.1-40.el9_8.5.src.rpm">
          <filename>libcurl-7.76.1-40.el9_8.5.i686.rpm</filename>
          <sum type="sha256">bfdd6f9c6ad6e5c7b15e3543573a2886ab60fe2bfeab15d2eedca2d2d3bdec19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55440</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:53:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
  * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)
  * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)
  * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)
  * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)
  * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)
  * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55440" id="RHSA-2026:55440" type="rhsa" title="RHSA-2026:55440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15588" id="CVE-2026-15588" type="cve" title="CVE-2026-15588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58010" id="CVE-2026-58010" type="cve" title="CVE-2026-58010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58011" id="CVE-2026-58011" type="cve" title="CVE-2026-58011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58012" id="CVE-2026-58012" type="cve" title="CVE-2026-58012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58013" id="CVE-2026-58013" type="cve" title="CVE-2026-58013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58014" id="CVE-2026-58014" type="cve" title="CVE-2026-58014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58015" id="CVE-2026-58015" type="cve" title="CVE-2026-58015"/>
      <reference href="https://bugzilla.redhat.com/2492243" id="2492243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492245" id="2492245" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492247" id="2492247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492248" id="2492248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492255" id="2492255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492256" id="2492256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2499675" id="2499675" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55440.html" id="ALSA-2026:55440" type="self" title="ALSA-2026:55440"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="glib2" version="2.68.4" release="19.el9_8.9" epoch="0" arch="i686" src="glib2-2.68.4-19.el9_8.9.src.rpm">
          <filename>glib2-2.68.4-19.el9_8.9.i686.rpm</filename>
          <sum type="sha256">a62662291b7bae595f2315194d429aaa9a31d9d90b4c0c3e96060fa4b1743be2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55841</id>
    <title>Important: unbound security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:51:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690)
  * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55841" id="RHSA-2026:55841" type="rhsa" title="RHSA-2026:55841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44690" id="CVE-2026-44690" type="cve" title="CVE-2026-44690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55973" id="CVE-2026-55973" type="cve" title="CVE-2026-55973"/>
      <reference href="https://bugzilla.redhat.com/2503063" id="2503063" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503075" id="2503075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55841.html" id="ALSA-2026:55841" type="self" title="ALSA-2026:55841"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="unbound-libs" version="1.24.2" release="3.el9_8.4" epoch="0" arch="i686" src="unbound-1.24.2-3.el9_8.4.src.rpm">
          <filename>unbound-libs-1.24.2-3.el9_8.4.i686.rpm</filename>
          <sum type="sha256">a1e74c6055966d76f9c2f3e6ad4cc3d006a55a9ecf46c961069414ecabb3ad8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5602</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 10:18:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5602" id="RHSA-2026:5602" type="rhsa" title="RHSA-2026:5602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25749" id="CVE-2026-25749" type="cve" title="CVE-2026-25749"/>
      <reference href="https://bugzilla.redhat.com/2437843" id="2437843" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5602.html" id="ALSA-2026:5602" type="self" title="ALSA-2026:5602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="23.el9_7.1" epoch="2" arch="noarch" src="vim-8.2.2637-23.el9_7.1.src.rpm">
          <filename>vim-filesystem-8.2.2637-23.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">e3e6f8748c33f75f49cbf00448f3e7d96e0de94fad7b86ed9dde7f99c350d231</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5603</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 09:58:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following (CVE-2026-23893)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5603" id="RHSA-2026:5603" type="rhsa" title="RHSA-2026:5603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23893" id="CVE-2026-23893" type="cve" title="CVE-2026-23893"/>
      <reference href="https://bugzilla.redhat.com/2431909" id="2431909" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5603.html" id="ALSA-2026:5603" type="self" title="ALSA-2026:5603"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="opencryptoki-libs" version="3.25.0" release="4.el9_7.2" epoch="0" arch="i686" src="opencryptoki-3.25.0-4.el9_7.2.src.rpm">
          <filename>opencryptoki-libs-3.25.0-4.el9_7.2.i686.rpm</filename>
          <sum type="sha256">04c1154b8ac184d9524de765b067089d068857dd3c05a32b6d8b0d2a1709d9a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:57252</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-20 00:00:00"/>
    <updated date="2026-08-26 14:01:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  * kernel: ip6_gre: Use cached t-&gt;net in ip6erspan_changelink() (CVE-2026-46120)
  * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
  * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
  * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)


Bug Fix(es) and Enhancement(s):  

  * kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065)
  * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549)
  * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:57252" id="RHSA-2026:57252" type="rhsa" title="RHSA-2026:57252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43206" id="CVE-2026-43206" type="cve" title="CVE-2026-43206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43233" id="CVE-2026-43233" type="cve" title="CVE-2026-43233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43237" id="CVE-2026-43237" type="cve" title="CVE-2026-43237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45878" id="CVE-2026-45878" type="cve" title="CVE-2026-45878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45991" id="CVE-2026-45991" type="cve" title="CVE-2026-45991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46120" id="CVE-2026-46120" type="cve" title="CVE-2026-46120"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52991" id="CVE-2026-52991" type="cve" title="CVE-2026-52991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53136" id="CVE-2026-53136" type="cve" title="CVE-2026-53136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53143" id="CVE-2026-53143" type="cve" title="CVE-2026-53143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53189" id="CVE-2026-53189" type="cve" title="CVE-2026-53189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53329" id="CVE-2026-53329" type="cve" title="CVE-2026-53329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53356" id="CVE-2026-53356" type="cve" title="CVE-2026-53356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53374" id="CVE-2026-53374" type="cve" title="CVE-2026-53374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63879" id="CVE-2026-63879" type="cve" title="CVE-2026-63879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63884" id="CVE-2026-63884" type="cve" title="CVE-2026-63884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63888" id="CVE-2026-63888" type="cve" title="CVE-2026-63888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63952" id="CVE-2026-63952" type="cve" title="CVE-2026-63952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64007" id="CVE-2026-64007" type="cve" title="CVE-2026-64007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64048" id="CVE-2026-64048" type="cve" title="CVE-2026-64048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64219" id="CVE-2026-64219" type="cve" title="CVE-2026-64219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64379" id="CVE-2026-64379" type="cve" title="CVE-2026-64379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64382" id="CVE-2026-64382" type="cve" title="CVE-2026-64382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64386" id="CVE-2026-64386" type="cve" title="CVE-2026-64386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64560" id="CVE-2026-64560" type="cve" title="CVE-2026-64560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-68343" id="CVE-2026-68343" type="cve" title="CVE-2026-68343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-68388" id="CVE-2026-68388" type="cve" title="CVE-2026-68388"/>
      <reference href="https://bugzilla.redhat.com/2467135" id="2467135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467156" id="2467156" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467202" id="2467202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482113" id="2482113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482124" id="2482124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482614" id="2482614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492403" id="2492403" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492719" id="2492719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492768" id="2492768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492788" id="2492788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2495941" id="2495941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2495950" id="2495950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502188" id="2502188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502321" id="2502321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502361" id="2502361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502422" id="2502422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502443" id="2502443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502463" id="2502463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502589" id="2502589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2506790" id="2506790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507042" id="2507042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507135" id="2507135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507216" id="2507216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2508504" id="2508504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2513373" id="2513373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2513470" id="2513470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-57252.html" id="ALSA-2026:57252" type="self" title="ALSA-2026:57252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.41.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.41.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.41.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">b338e4717e4156cabdaf57017a2f29d58ba691877c07f9b7581f1d3d80073d85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:57610</id>
    <title>Moderate: kbd security update</title>
    <issued date="2026-08-20 00:00:00"/>
    <updated date="2026-08-21 09:21:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kbd security update</summary>
    <description>The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.  

Security Fix(es):  

  * kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:57610" id="RHSA-2026:57610" type="rhsa" title="RHSA-2026:57610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-72693" id="CVE-2026-72693" type="cve" title="CVE-2026-72693"/>
      <reference href="https://bugzilla.redhat.com/2462115" id="2462115" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-57610.html" id="ALSA-2026:57610" type="self" title="ALSA-2026:57610"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kbd-legacy" version="2.4.0" release="12.el9_8" epoch="0" arch="noarch" src="kbd-2.4.0-12.el9_8.src.rpm">
          <filename>kbd-legacy-2.4.0-12.el9_8.noarch.rpm</filename>
          <sum type="sha256">37368b49a8ca6b817a6dc68af7c589e5e893a866dc7efc1826d2718466be975e</sum>
        </package>
        <package name="kbd-misc" version="2.4.0" release="12.el9_8" epoch="0" arch="noarch" src="kbd-2.4.0-12.el9_8.src.rpm">
          <filename>kbd-misc-2.4.0-12.el9_8.noarch.rpm</filename>
          <sum type="sha256">f296e7c7bd2f3bf4e746277ed6c357724abac605c47bec4f4232c6216a767384</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:58572</id>
    <title>Moderate: NetworkManager security update</title>
    <issued date="2026-08-24 00:00:00"/>
    <updated date="2026-08-25 08:42:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:58572" id="RHSA-2026:58572" type="rhsa" title="RHSA-2026:58572"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10805" id="CVE-2026-10805" type="cve" title="CVE-2026-10805"/>
      <reference href="https://bugzilla.redhat.com/2484613" id="2484613" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-58572.html" id="ALSA-2026:58572" type="self" title="ALSA-2026:58572"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="NetworkManager-config-server" version="1.54.3" release="5.el9_8" epoch="1" arch="noarch" src="NetworkManager-1.54.3-5.el9_8.src.rpm">
          <filename>NetworkManager-config-server-1.54.3-5.el9_8.noarch.rpm</filename>
          <sum type="sha256">1fef2fab94ca2f67d3545e03bd90d6cd149b5e9658f02a265c5bfb0d49dac9a0</sum>
        </package>
        <package name="NetworkManager-initscripts-updown" version="1.54.3" release="5.el9_8" epoch="1" arch="noarch" src="NetworkManager-1.54.3-5.el9_8.src.rpm">
          <filename>NetworkManager-initscripts-updown-1.54.3-5.el9_8.noarch.rpm</filename>
          <sum type="sha256">35401bb486c5a849d1e923b9d73ff5b8d43f139aace8d9f1746c225c21f65e37</sum>
        </package>
        <package name="NetworkManager-libnm" version="1.54.3" release="5.el9_8" epoch="1" arch="i686" src="NetworkManager-1.54.3-5.el9_8.src.rpm">
          <filename>NetworkManager-libnm-1.54.3-5.el9_8.i686.rpm</filename>
          <sum type="sha256">ffc5da6084df5db586ae1181a1b6c32c96f751add9e09f935f25b21eaffa475e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:58936</id>
    <title>Important: sqlite security update</title>
    <issued date="2026-08-24 00:00:00"/>
    <updated date="2026-08-26 07:43:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  

Security Fix(es):  

  * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822)
  * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:58936" id="RHSA-2026:58936" type="rhsa" title="RHSA-2026:58936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11822" id="CVE-2026-11822" type="cve" title="CVE-2026-11822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11824" id="CVE-2026-11824" type="cve" title="CVE-2026-11824"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-58936.html" id="ALSA-2026:58936" type="self" title="ALSA-2026:58936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="sqlite-libs" version="3.34.1" release="11.el9_8" epoch="0" arch="i686" src="sqlite-3.34.1-11.el9_8.src.rpm">
          <filename>sqlite-libs-3.34.1-11.el9_8.i686.rpm</filename>
          <sum type="sha256">10216fcab5c3ba4c54d1a2ed0e2cc49827da947bd5e66719c8e9c3c89d286516</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:59723</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-26 00:00:00"/>
    <updated date="2026-08-28 08:49:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211)
  * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)
  * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)
  * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
  * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)
  * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
  * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)
  * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
  * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
  * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
  * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)
  * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res-&gt;rt6 pointer (CVE-2026-74581)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux-9.8.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-166118)
  * ss core dumped when there is an SCTP session [almalinux-9.8.z] (JIRA:AlmaLinux-212398)
  * [IBM 9.9 FEAT] zcrypt driver overwrite function - kernel part [almalinux-9.8.z] (JIRA:AlmaLinux-245333)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:59723" id="RHSA-2026:59723" type="rhsa" title="RHSA-2026:59723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68211" id="CVE-2025-68211" type="cve" title="CVE-2025-68211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23003" id="CVE-2026-23003" type="cve" title="CVE-2026-23003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43114" id="CVE-2026-43114" type="cve" title="CVE-2026-43114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52920" id="CVE-2026-52920" type="cve" title="CVE-2026-52920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52924" id="CVE-2026-52924" type="cve" title="CVE-2026-52924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53131" id="CVE-2026-53131" type="cve" title="CVE-2026-53131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53185" id="CVE-2026-53185" type="cve" title="CVE-2026-53185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53268" id="CVE-2026-53268" type="cve" title="CVE-2026-53268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64189" id="CVE-2026-64189" type="cve" title="CVE-2026-64189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64191" id="CVE-2026-64191" type="cve" title="CVE-2026-64191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64276" id="CVE-2026-64276" type="cve" title="CVE-2026-64276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64277" id="CVE-2026-64277" type="cve" title="CVE-2026-64277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-74581" id="CVE-2026-74581" type="cve" title="CVE-2026-74581"/>
      <reference href="https://bugzilla.redhat.com/2422696" id="2422696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432681" id="2432681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2466994" id="2466994" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492095" id="2492095" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492112" id="2492112" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492735" id="2492735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492747" id="2492747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492770" id="2492770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502872" id="2502872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502889" id="2502889" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507290" id="2507290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507301" id="2507301" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2520980" id="2520980" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-59723.html" id="ALSA-2026:59723" type="self" title="ALSA-2026:59723"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="687.42.1.el9_8" epoch="0" arch="noarch" src="kernel-5.14.0-687.42.1.el9_8.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-687.42.1.el9_8.noarch.rpm</filename>
          <sum type="sha256">1d62d6b4a606c30d34716a993219e98f936dfee3dda694ef73fb2ca0ea798f77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:60226</id>
    <title>Moderate: attr security update</title>
    <issued date="2026-08-26 00:00:00"/>
    <updated date="2026-08-27 08:10:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>attr security update</summary>
    <description>The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects.  

Security Fix(es):  

  * attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:60226" id="RHSA-2026:60226" type="rhsa" title="RHSA-2026:60226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-54371" id="CVE-2026-54371" type="cve" title="CVE-2026-54371"/>
      <reference href="https://bugzilla.redhat.com/2490283" id="2490283" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-60226.html" id="ALSA-2026:60226" type="self" title="ALSA-2026:60226"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_8_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_8_default</name>
        <package name="libattr" version="2.6.0" release="1.el9_8" epoch="0" arch="i686" src="attr-2.6.0-1.el9_8.src.rpm">
          <filename>libattr-2.6.0-1.el9_8.i686.rpm</filename>
          <sum type="sha256">d34791d536432061dc22c5cd75a2fc327c7b6778b60b6115ec37ff2f710b8f88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6153</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:42:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180)
  * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
  * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
  * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6153" id="RHSA-2026:6153" type="rhsa" title="RHSA-2026:6153"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38180" id="CVE-2025-38180" type="cve" title="CVE-2025-38180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40096" id="CVE-2025-40096" type="cve" title="CVE-2025-40096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23144" id="CVE-2026-23144" type="cve" title="CVE-2026-23144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23171" id="CVE-2026-23171" type="cve" title="CVE-2026-23171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23191" id="CVE-2026-23191" type="cve" title="CVE-2026-23191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23193" id="CVE-2026-23193" type="cve" title="CVE-2026-23193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23209" id="CVE-2026-23209" type="cve" title="CVE-2026-23209"/>
      <reference href="https://bugzilla.redhat.com/2376376" id="2376376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407333" id="2407333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439872" id="2439872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439886" id="2439886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439887" id="2439887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439900" id="2439900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439947" id="2439947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6153.html" id="ALSA-2026:6153" type="self" title="ALSA-2026:6153"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.45.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">190f50a0507efbac414b062551485df936edc98b7615361a4d072ea98852417a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6570</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-15 08:21:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
  * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6570" id="RHSA-2026:6570" type="rhsa" title="RHSA-2026:6570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38109" id="CVE-2025-38109" type="cve" title="CVE-2025-38109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23111" id="CVE-2026-23111" type="cve" title="CVE-2026-23111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23210" id="CVE-2026-23210" type="cve" title="CVE-2026-23210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23231" id="CVE-2026-23231" type="cve" title="CVE-2026-23231"/>
      <reference href="https://bugzilla.redhat.com/2376101" id="2376101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439687" id="2439687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439895" id="2439895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444376" id="2444376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6570.html" id="ALSA-2026:6570" type="self" title="ALSA-2026:6570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.47.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">1bb23cb929c84667ea25a58064e4e87b875599bd08a95396350ff0b35f6fb073</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6766</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 19:41:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6766" id="RHSA-2026:6766" type="rhsa" title="RHSA-2026:6766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6766.html" id="ALSA-2026:6766" type="self" title="ALSA-2026:6766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="python3-libs" version="3.9.25" release="3.el9_7.2" epoch="0" arch="i686" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python3-libs-3.9.25-3.el9_7.2.i686.rpm</filename>
          <sum type="sha256">0f2ac2c36f94d75b4f8d02d59ceaec04dc1342510cc56f2d0917b663349f7623</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7384</id>
    <title>Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection</title>
    <issued date="2026-04-10 00:00:00"/>
    <updated date="2026-04-15 08:06:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>cockpit: Unauthenticated remote code execution due to SSH command-line argument injection</summary>
    <description>Cockpit enables users to administer GNU/Linux servers using a web browser. It  
offers network configuration, log inspection, diagnostic reports, SELinux  
troubleshooting, interactive command-line sessions, and more.  

Security Fix(es):  

  * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)


For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE page(s)  
listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7384" id="RHSA-2026:7384" type="rhsa" title="RHSA-2026:7384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4631" id="CVE-2026-4631" type="cve" title="CVE-2026-4631"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7384.html" id="ALSA-2026:7384" type="self" title="ALSA-2026:7384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="cockpit-bridge" version="344" release="2.el9_7" epoch="0" arch="noarch" src="cockpit-344-2.el9_7.src.rpm">
          <filename>cockpit-bridge-344-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">2effe186221fe6dc07d95815c153435b8730f5e721c05bc7db9576b8bc00adad</sum>
        </package>
        <package name="cockpit-system" version="344" release="2.el9_7" epoch="0" arch="noarch" src="cockpit-344-2.el9_7.src.rpm">
          <filename>cockpit-system-344-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">3b3523d9a2fd6605d71280f802e7ab26a7f5145b77dd7ecc2e593fbfb83bd428</sum>
        </package>
        <package name="cockpit-doc" version="344" release="2.el9_7" epoch="0" arch="noarch" src="cockpit-344-2.el9_7.src.rpm">
          <filename>cockpit-doc-344-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">9e555d673f9eb1696fd5340e348f6a1c9787e2fdd1db09530fde04b6077fc7b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7668</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 08:03:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7668" id="RHSA-2026:7668" type="rhsa" title="RHSA-2026:7668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7668.html" id="ALSA-2026:7668" type="self" title="ALSA-2026:7668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libnghttp2" version="1.43.0" release="6.el9_7.1" epoch="0" arch="i686" src="nghttp2-1.43.0-6.el9_7.1.src.rpm">
          <filename>libnghttp2-1.43.0-6.el9_7.1.i686.rpm</filename>
          <sum type="sha256">b0e5047ba1fcd51dc8ab8c37d2893121c1dceb503305e0eba596a3488a656243</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8259</id>
    <title>Important: vim security update</title>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-15 10:37:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)
  * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)
  * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8259" id="RHSA-2026:8259" type="rhsa" title="RHSA-2026:8259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28417" id="CVE-2026-28417" type="cve" title="CVE-2026-28417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28421" id="CVE-2026-28421" type="cve" title="CVE-2026-28421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33412" id="CVE-2026-33412" type="cve" title="CVE-2026-33412"/>
      <reference href="https://bugzilla.redhat.com/2443455" id="2443455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443474" id="2443474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450907" id="2450907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8259.html" id="ALSA-2026:8259" type="self" title="ALSA-2026:8259"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="vim-filesystem" version="8.2.2637" release="23.el9_7.2" epoch="2" arch="noarch" src="vim-8.2.2637-23.el9_7.2.src.rpm">
          <filename>vim-filesystem-8.2.2637-23.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">94fe2cb8f2f54709fc1042edb356a556e14c1d5d65d2ddd8d1c19e1e5ff29b64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8510</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 11:10:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
  * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8510" id="RHSA-2026:8510" type="rhsa" title="RHSA-2026:8510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4424" id="CVE-2026-4424" type="cve" title="CVE-2026-4424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5121" id="CVE-2026-5121" type="cve" title="CVE-2026-5121"/>
      <reference href="https://bugzilla.redhat.com/2449006" id="2449006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452945" id="2452945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8510.html" id="ALSA-2026:8510" type="self" title="ALSA-2026:8510"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="libarchive" version="3.5.3" release="9.el9_7" epoch="0" arch="i686" src="libarchive-3.5.3-9.el9_7.src.rpm">
          <filename>libarchive-3.5.3-9.el9_7.i686.rpm</filename>
          <sum type="sha256">83dc63bcd67b3717a98b4e9a6e5a2f89376d58ec6a605d609440c3a3afd9caf8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8921</id>
    <title>Important: kernel security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-22 10:40:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8921" id="RHSA-2026:8921" type="rhsa" title="RHSA-2026:8921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8921.html" id="ALSA-2026:8921" type="self" title="ALSA-2026:8921"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.49.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">628d5c00f64abaaf1213daad568586e29fd384a14589760f240f4d119d9146d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A002</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:09:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A002.html" id="ALSA-2026:A002" type="self" title="ALSA-2026:A002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.49.2.el9_7.noarch.rpm</filename>
          <sum type="sha256">7323ac4a3a753a19cdd9f3bbd4cdbad346fa356776d10cc1c82295e29a5f5d70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A005</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 14:26:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A005.html" id="ALSA-2026:A005" type="self" title="ALSA-2026:A005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.54.3.el9_7.noarch.rpm</filename>
          <sum type="sha256">05b83f3cfdca4d1541de02fb7f00f2e915c04fc04d8f0f472d7cb4d6205b1acb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A009</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-16 00:00:00"/>
    <updated date="2026-05-16 13:09:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):
  * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300)
  * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477015" id="show_bug.cgi?id=2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477802" id="show_bug.cgi?id=2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A009.html" id="ALSA-2026:A009" type="self" title="ALSA-2026:A009"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-i686-baseos-rpms__9_7_default">
        <name>almalinux-9-for-i686-baseos-rpms__9_7_default</name>
        <package name="kernel-abi-stablelists" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-611.54.6.el9_7.noarch.rpm</filename>
          <sum type="sha256">b68ac0ea7c19c42d12d4ded7368c1f6e819930a7ef83322328ae407269c7defb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>